CVE-2026-4629
Keycloak: keycloak: privilege escalation through hardcoded role mapper injection
Vexday Risk Score
10Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 6.5EPSS —KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
30 jun 2026Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability by injecting a hardcoded role mapper into any client. This action allows the user to bypass existing scope restrictions and inject the `realm-admin` role into generated tokens, resulting in privilege escalation and full administrative access to the realm.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
Red Hat · Red Hat Build of KeycloakQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →