Keycloak CVEs, release by release

Conditional OTP trusts skip headers on untrusted proxy paths

Potential KDC spoofing attack when Kerberos password authentication is enabled

Standard Token Exchange bypasses required mTLS certificate binding and issues an active bearer token when no client certificate is supplied

A delegated admin with only manage-users can become realm-admin by joining (or being created into) a group that maps an admin role

Generic user update bypasses denied reset-password permission

Path traversal via X.509 CRL Distribution Point - client-supplied CRL path escapes $KC_HOME/conf

SMTP starttls=true permits plaintext credential and message downgrade

Admin credential DELETE bypasses denied reset-password permission

Persistent wrong-account linking through null / GitHub identity provider

OIDC identity provider update reuses masked client secret after token URL changes

Cross-realm realm resource read/write via per-request session-level cache in RealmCacheSession

Missing user view authorization in the Authorization Services policy evaluation endpoint, possible incomplete fix of CVE-2026-37978

Broken access control in Admin REST API: roles/{role-name}/groups discloses groups the caller cannot view (incomplete fix of the 26.7.2 hardening)

PAR single-use bypass via prompt=none

OIDC broker backchannel logout accepts unsigned forged logout tokens when signature validation is disabled

Unbounded metric series creation via idp tag on broker login endpoint

UMA scope merge across resource owners via name collision in resolveResourcePermission

2FA setup enforcement bypass via /realms/{realm}/login-actions/restart

IdP mapper admin role escalation

jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite

Name-only group claims let same-name groups satisfy path-specific group policies

jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

OIDC broker applies id_token email_verified to userinfo email, marking unverified addresses as verified

Group policy child-extension matches sibling group path prefixes

Source-group condition matches duplicate group names and can skip negative-logic enforcement

Inactive out-of-audience introspection responses can include a signed JWT claim

Device Authorization Grant issues tokens to brute-force-locked accounts (sibling of CVE-2026-9798)

Confidential client secret disclosed to view-clients role via Client Registration GET

Incomplete fix for CVE-2026-9798 (Keycloak CIBA brute-force lockout bypass at token redemption)

Secure-client-uris localhost exception accepts localhost-prefixed attacker domains

token-exchange refresh continues issuing tokens for a disabled audience client

Client policy source-host wildcard domains match non-subdomain suffixes

SAML Redirect Binding Parameter Pollution

Username Takeover Leading to Account Lockout

Microsoft external access-token exchange bypasses configured tenant

Google external access-token exchange bypasses hosted-domain restriction

FGAP V2: Group assignment bypass during user creation (POST /users) allows adding unpermitted groups

Information disclosure: GET /roles/{role}/users returns user PII without the per-user view filter

UMA claim token can override the authorization time-policy clock

Client access-type condition evaluates updates against the old client type

Keycloak jwt-bearer authorization grant does not enforce consentRequired

Generic identity-provider creation can bind brokers to organizations without manage-organizations

Required signed-JWT assertion policy can be bypassed with unsigned assertion headers

Authorization codes can be retargeted to another client session

Full-scope-disabled client policy validation can be bypassed by omitting fullScopeAllowed

Organization managers can create managed members through stored registration links without manage-users

Missing per-role authorization on RoleContainerResource composite endpoints

Incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roles

Incomplete fix for CVE-2026-9083 — relative path traversal still enables filesystem probing in 26.6.4

Realm default-group reads disclose hidden groups under FGAP v2

Authenticator config surfaces expose raw reCAPTCHA secrets

Client not-before revocation is ignored when realm not-before is older but nonzero

Incomplete fix for redirect_uri OIDC response-parameter injection: forbidden-parameter check (commit 18832bca) inspects only the query string, not the URL fragment

jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy

jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

Keycloak Admin REST API Leaks Vault-Resolved Rotated Client Secrets

OpenTelemetry Java SDK has Unbounded Memory Allocation in W3C Baggage Propagation

Keycloak 26.6.3 Fine-Grained Admin Permissions Bypass via Role Groups Endpoint

Group hierarchy search discloses hidden parent groups under FGAP v2