CVE-2026-18570 — MEDIUM (5.4)

Vulnerability Description

A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This component is responsible for enforcing security policies during client registration and configuration in Red Hat Build of Keycloak. The issue occurs because the executor only validates the fullScopeAllowed field when it is explicitly provided in a request. By omitting this field, a delegated user can bypass the policy, resulting in a client created with full scope access. This allows the client to obtain tokens with unauthorized role mappings.

CVSS Score

5.4

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Redhat	Build Of Keycloak	-

Related Weaknesses (CWE)

CWE-862

References

https://access.redhat.com/security/cve/CVE-2026-18570Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2509756Issue TrackingVendor Advisory

FAQ

What is CVE-2026-18570?

CVE-2026-18570 is a vulnerability with a CVSS score of 5.4 (MEDIUM). A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This component is responsible for enforcing security policies during client registration and ...

How severe is CVE-2026-18570?

CVE-2026-18570 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-18570?

Check the references section above for vendor advisories and patch information. Affected products include: Redhat Build Of Keycloak.