CVE-2026-9797 Keycloak: keycloak: privilege escalation via client authentication manipulation by an authenticated administrator

A flaw was found in Keycloak's administrative services org.keycloak.services.resources.admin. A highly privileged attacker, authenticated with a 'manage-clients' role, could exploit this vulnerability through several methods, including manipulating client JSON Web Key Sets JWKS, swapping client...