ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +83 more potentially affected by CVE-2025-7784 via org.keycloak:keycloak-services (>=26.0.0, <=26.2.5)

org.keycloak:keycloak-services MAVEN version =26.0.0, =1.0.0, =4.1.0-26.0, =4.1.0-26.0, =2.0.0-26.0, =1.1.1-26.0, =1.11.0, =0.5.42, =0.6.1 - io.github.jeff-tian:keycloak-sms-provider-aliyun 2.4.1 - io.github.jeff-tian:keycloak-sms-provider-aws-sns 2.4.1 -...

CVE-2025-7784 Org.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)

A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin PermissionsFGAPv2 are enabled. An administrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enforcement. This vulnerability allows unauthorize...

CVE-2025-7784

A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin PermissionsFGAPv2 are enabled. An administrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enforcement. This vulnerability allows unauthorize...