As a proactive security measure, SingleStore had disabled the Forgot Password workflow in Helios Portal due to a security vulnerability published in the community (CVE-2026-18963) and identified in previous version of Keycloak.
SSO users are unaffected. The ability to change password while logged in for non-SSO users is also unaffected.
Further note that SingleStore has found no evidence of attempted or successful exploit of this CVE.
Note: As of October 24, 2026, SingleStore has addressed the security vulnerability (CVE-2026-18963) identified in our previous version of Keycloak and re-enabled the Forgot Password workflow in Helios Portal. The workflow is once again available to non-SSO users.