keycloak-services: keycloak-services: DCR registration-time claim-path gap allows forging realm_access.roles

A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management solution. The issue occurs because the system does not properly restrict which claim names can be used when setting up new clients. An attacker with valid registration...

CVE-2026-96547

A flaw exists in the Dynamic Client Registration (DCR) component of Keycloak , an open-source identity and access management solution. The system fails to properly restrict which claim names can be used during the registration of new clients. This allows an attacker with valid registration creden...

CVE-2026-96547 Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles

A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management solution. The issue occurs because the system does not properly restrict which claim names can be used when setting up new clients. An attacker with valid registration...