PT-2026-44186 · Red Hat · Keycloak

Andrej Tomci · Published 2026-05-28 · Updated 2026-07-02 · CVE-2026-9795

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A flaw exists in the Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with limited client management permissions can assign any realm role, including highly privileged ones, to a client's scope mapping. This bypasses security controls, allowing the injected role to be included in a user's authentication token upon accessing the modified client, which can result in unauthorized privilege escalation within the realm.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-9795

GHSA-32H4-44JJ-C5VX

GHSA-8HCX-P7M8-GC28

Affected Products

Keycloak

References · 24

• https://access.redhat.com/errata/RHSA-2026:30049 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:30084 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2482462 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2026-9795 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:30050 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:30083 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-32h4-44jj-c5vx · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8hcx-p7m8-gc28 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-9795 · Security Note
• https://github.com/keycloak/keycloak/security/advisories/GHSA-32h4-44jj-c5vx · Note
• https://github.com/keycloak/keycloak/pull/50451 · Note
• https://github.com/keycloak/keycloak/commit/8894c027e788904c740ff9a1a60fcfaa34a10d13 · Note
• https://github.com/keycloak/keycloak/issues/50350 · Note
• https://github.com/keycloak/keycloak · Note
• https://twitter.com/Tank23x0/status/2071625238463627545 · Twitter Post