6.5
Medium
CVE-2026-9705 A flaw was found in Keycloak's client registration service
Description
A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token (RAT), could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses security controls, allowing the attacker to reset the client's secret and potentially regain privileged API access. The primary impact includes unauthorized information disclosure and potential integrity compromise.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Build of Keycloak | Versions not published | |
| Red Hat build of Keycloak 26.6 26.6 | earliest → < 26.6-8 | 26.6-8 |
| Red Hat build of Keycloak 26.6.4 | Versions not published | |
| Red Hat build of Keycloak 26.4 26.4 | earliest → < 26.4-19 | 26.4-19 |
| Red Hat build of Keycloak 26.4.13 | Versions not published |
References
- RHSA-2026:30049 access.redhat.com
- RHSA-2026:30050 access.redhat.com
- RHSA-2026:30083 access.redhat.com
- RHSA-2026:30084 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2481878 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Build of Keycloak
The 276 CVEs of Red Hat Build of Keycloak →
CVE-2026-9797
Keycloak: keycloak: privilege escalation via client authentication manipulation by an authenticated administrator
6.5
Medium
CVE-2026-97848
Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization
6.5
Medium
CVE-2026-97367
Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover
6.4
Medium
CVE-2026-96547
Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles
6.5
Medium