Keycloak allows unauthorized access to resources via uma permission ticket bypass

Description A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access UMA permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows the user to gain unauthoriz...

GHSA-W3P3-7CJG-VGFW Keycloak allows unauthorized access to resources via uma permission ticket bypass

Description A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access UMA permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows the user to gain unauthoriz...

PT-2026-133253

Description A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access UMA permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows the user to gain unauthoriz...

GHSA-GFV4-4VR2-RR4G Duplicate Advisory: Keycloak allows unauthorized access to resources via uma permission ticket bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w3p3-7cjg-vgfw. This link is maintained to preserve external references. Original Description A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access UMA permissi...

Duplicate Advisory: Keycloak allows unauthorized access to resources via uma permission ticket bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w3p3-7cjg-vgfw. This link is maintained to preserve external references. Original Description A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access UMA permissi...

CVE-2026-9799

A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access UMA permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows the user to gain unauthorized access to...

CVE-2026-9799: Authorization Bypass Through User-Controlled Key

A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access UMA permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows the user to gain unauthorized access to...

PT-2026-133245

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w3p3-7cjg-vgfw. This link is maintained to preserve external references. Original Description A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access UMA permissi...

CVE-2025-3910

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication...

CVE-2025-3910: Improper Authentication

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication...