Last Modified: Oct 11, 2026
Affected Product(s):
BIG-IP (all modules)
Known Affected Versions:
17.5.1.9
Opened: Sep 25, 2026 Severity: 2-Critical
apmd may terminate and restart during an OAuth token refresh. The refresh transaction may fail, and users may need to authenticate again.
OAuth refresh processing is interrupted - apmd restarts.
Observed on BIG-IP APM 17.5.1.9 build 0.46.12 with an OAuth Client using password/ROPC grant and an openid scope. The issue requires refresh processing involving ID-token validation and an empty or invalid runtime JWT configuration.
None
None