CVE-2026-33585
LOW
NVD
CVSS Score
3.8
Severity
LOW
Published
May 13, 2026
Vendor
unknown
Description
Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03.