CVE-2026-3121 in KeyCloak
Zusammenfassung
von MITRE • 26.03.2026
A flaw was found in Keycloak. An administrator with `manage-clients` permission can exploit a misconfiguration where this permission is equivalent to `manage-permissions`. This allows the administrator to escalate privileges and gain control over roles, users, or other administrative functions within the realm. This privilege escalation can occur when admin permissions are enabled at the realm level.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.