~ / search / GHSA-f5p5-6xmx-p252

GHSA-f5p5-6xmx-p252

Keycloak vulnerable to authorization bypass via incorrect uri comparison

Source: GitHub Advisory Database (reviewed) High CVE-2026-9800

Packages

EcosystemPackageAffectedFixed in
Maven org.keycloak:keycloak-services < 26.6.4 26.6.4
Maven org.keycloak:keycloak-policy-enforcer < 26.0.10 26.0.10

Details

As written in the advisory (Markdown source, shown as plain text).

### Description A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied page path within a request URL, either as a path segment or a query parameter, an attacker can gain unauthorized access to protected resources.

References

External links from the advisory. They lead to third-party sites.