BIT-KEYCLOAK-2026-15571 Flaw in the legacy client-initiated account-linking endpoint of Keycloak

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC...