CVE-2026-103112

A flaw in the keycloak-services component of Keycloak allows for account takeover via an authentication race condition. The vulnerability arises because the system fails to verify if an authenticator remains valid when transitioning between the standard authentication path and the reset credentia...