CVE-2026-18571— Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation
Possible ATT&CK Techniques 1AI
T1136.001 · Local AccountGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-18571
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could lead to unauthorized access to sensitive information or elevated privileges for the newly created users.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Build of Keycloak | - | cpe:/a:redhat:build_keycloak: | |
| Red Hat | Red Hat Build of Keycloak | - | cpe:/a:redhat:build_keycloak: | |
| Red Hat | Red Hat Build of Keycloak | - | cpe:/a:redhat:build_keycloak: | |
| Red Hat | Red Hat Data Grid 8 | - | cpe:/a:redhat:jboss_data_grid:8 | |
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack | - | cpe:/a:redhat:jbosseapxp | |
| Red Hat | Red Hat Single Sign-On 7 | - | cpe:/a:redhat:red_hat_single_sign_on:7 |
II. Public POCs for CVE-2026-18571
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-18571
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-18571 (1)
Other References for CVE-2026-18571 (1)
Same Patch Batch · Red Hat · 2026-08-02 · 4 CVEs total
| CVE-2026-18573 | 6.5 MEDIUM | Keycloak-services: keycloak-services: client access-type policy condition bypass during cl |
| CVE-2026-18572 | 6.5 MEDIUM | Keycloak-services: keycloak-services: uma claim token can override authorization time-poli |
| CVE-2026-18570 | 5.4 MEDIUM | Keycloak-services: keycloak-services: full-scope-disabled client policy validation bypass |
IV. Related Vulnerabilities
Same product: Red Hat Build of Keycloak
- CVE-2026-18573
Keycloak-services: keycloak-services: client access-type pol - CVE-2026-18572
Keycloak-services: keycloak-services: uma claim token can ov - CVE-2026-18570
Keycloak-services: keycloak-services: full-scope-disabled cl - CVE-2026-18209
Keycloak-services: keycloak-services: oidc redirect_uri frag - CVE-2026-18206
Keycloak-services: keycloak-services: client policy source-h
Same vendor: Red Hat
- CVE-2026-18573
Keycloak-services: keycloak-services: client access-type pol - CVE-2026-18572
Keycloak-services: keycloak-services: uma claim token can ov - CVE-2026-18570
Keycloak-services: keycloak-services: full-scope-disabled cl - CVE-2026-18141
Aap-gateway: aap-gateway: authentication bypass in event-dri - CVE-2026-11770
389-ds-base: 389-ds-base: pre-auth ldap filter injection in
Same weakness: CWE-862
- CVE-2026-18573
Keycloak-services: keycloak-services: client access-type pol - CVE-2026-18570
Keycloak-services: keycloak-services: full-scope-disabled cl - CVE-2026-67344
ArcadeDB before 26.7.2 Authentication Bypass via ALTER TYPE - CVE-2026-17580
Advanced Views <= 3.9.1 - Missing Authorization to Authentic - CVE-2026-11995
Gutena Forms – Contact Form, Survey Form, Feedback Form, Boo
V. Comments for CVE-2026-18571
No comments yet