PT-2025-30043 · Red Hat · Keycloak

Patrick Kutz · Published 2025-07-18 · Updated 2026-05-06 · CVE-2025-7784

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A flaw exists in Keycloak when Fine-Grained Admin Permissions (FGAPv2) are enabled. An administrative user possessing the manage-users role can escalate privileges to realm-admin due to improper privilege enforcement. This allows unauthorized elevation of access rights, compromising the intended separation of administrative duties.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-7784

GHSA-27GP-8389-HM4W

GHSA-83J7-MHW9-388W

Affected Products

Keycloak

References · 19

• https://access.redhat.com/errata/RHSA-2025:12015 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:12016 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2025-7784 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-27gp-8389-hm4w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7784 · Security Note
• https://osv.dev/vulnerability/GHSA-83j7-mhw9-388w · Vendor Advisory
• https://github.com/keycloak/keycloak · Note
• https://github.com/keycloak/keycloak/issues/39956 · Note
• https://github.com/keycloak/keycloak/security/advisories/GHSA-27gp-8389-hm4w · Note
• https://github.com/keycloak/keycloak/issues/41137 · Note
• https://github.com/keycloak/keycloak/pull/41168 · Note
• https://t.me/cveNotify/162399 · Telegram Post
• https://t.me/cvenotify/129447 · Telegram Post
• https://twitter.com/CVEnew/status/1946207141456429530 · Twitter Post
• https://t.me/cveNotify/131726 · Telegram Post