EUVD-2026-117964

A flaw was found in Keycloak's administrative services org.keycloak.services.resources.admin. A highly privileged attacker, authenticated with a 'manage-clients' role, could exploit this vulnerability through several methods, including manipulating client JSON Web Key Sets JWKS, swapping client...