CVE-2026-9792

A flaw was found in Keycloak's Client Policies, specifically within the "org.keycloak.protocol.oidc" component. When certain condition providers client-type, client-roles, client-attributes, client-scopes are used to enforce security restrictions, the "reject-ropc-grant" executor is silently...