A flaw was found in the SAML 1.1 assertion parser within the keycloak-saml-core library. The vulnerability is an infinite loop triggered when an AuthenticationStatement contains an AuthorityBinding child element. The parser fails to advance past this element, repeatedly processing it and growing an internal list until the Java heap is exhausted. This leads to a java.lang.OutOfMemoryError and immediate JVM termination. This issue represents an incomplete fix for CVE-2026-7307. A remote, unauthenticated attacker can exploit this by sending a single specially crafted SAML request to the realm SAML endpoint or the SAML identity provider broker endpoint. Successful exploitation allows an attacker to stop the Keycloak node completely, preventing all logins, token issuance, and administrative functions until the process is manually restarted.