CVE-2026-37978— Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin api
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Build of Keycloak | any | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-37978
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin api
Source: NVD (National Vulnerability Database)
Vulnerability Description
A flaw was found in Keycloak. A low-privilege administrator with the 'view-clients' role can exploit this by invoking the 'evaluate-scopes' Admin API endpoints with an arbitrary user ID (userId) parameter. This vulnerability allows for cross-role personally identifiable information (PII) leakage, enabling unauthorized visibility into user identities and authorizations across the realm. Exploitation is possible remotely via network access to the Admin API.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Build of Keycloak | - | cpe:/a:redhat:build_keycloak: |
II. Public POCs for CVE-2026-37978
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-37978
请登录查看更多情报信息。
Same Patch Batch · Red Hat · 2026-05-19 · 11 CVEs total
| CVE-2026-7504 | 8.1 HIGH | Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in k |
| CVE-2026-7507 | 7.5 HIGH | Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to accou |
| CVE-2026-7307 | 7.5 HIGH | Keycloak: keycloak: denial of service via specially crafted saml input |
| CVE-2026-7571 | 7.1 HIGH | Keycloak: keycloak: access token disclosure and implicit flow bypass via forged client dat |
| CVE-2026-37982 | 6.8 MEDIUM | Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauth |
| CVE-2026-4630 | 6.8 MEDIUM | Keycloak: keycloak: unauthorized resource access and data modification via insecure direct |
| CVE-2026-37979 | 6.5 MEDIUM | Keycloak: keycloak: information disclosure via oidc token introspection endpoint audience |
| CVE-2026-8922 | 5.4 MEDIUM | Org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org |
| CVE-2026-37981 | 4.3 MEDIUM | Keycloak: org.keycloak.authorization: keycloak: information disclosure via broken access c |
| CVE-2026-8830 | 4.3 MEDIUM | Keycloak: org.keycloak/keycloak-services: keycloak: policy bypass during webauthn credenti |
IV. Related Vulnerabilities
Same product: Red Hat Build of Keycloak
- CVE-2026-7571
Keycloak: keycloak: access token disclosure and implicit flo - CVE-2026-7507
Org.keycloak/keycloak-services: session fixation in oidc log - CVE-2026-7504
Org.keycloak/keycloak-services: open redirect when using wil - CVE-2026-37982
Keycloak: org.keycloak.authentication: keycloak: unauthorize - CVE-2026-37979
Keycloak: keycloak: information disclosure via oidc token in
Same vendor: Red Hat
- CVE-2026-7571
Keycloak: keycloak: access token disclosure and implicit flo - CVE-2026-7507
Org.keycloak/keycloak-services: session fixation in oidc log - CVE-2026-7504
Org.keycloak/keycloak-services: open redirect when using wil - CVE-2026-37982
Keycloak: org.keycloak.authentication: keycloak: unauthorize - CVE-2026-37979
Keycloak: keycloak: information disclosure via oidc token in
Same weakness: CWE-639
- CVE-2026-6566
Photo Gallery, Sliders, Proofing and Themes <= 4.2.0 - Insec - CVE-2026-6072
Oliver POS <= 2.4.2.6 - Unauthenticated Authorization Bypass - CVE-2026-42097
Authentication Bypass in Sparx Pro Cloud Server - CVE-2026-4630
Keycloak: keycloak: unauthorized resource access and data mo - CVE-2026-33052
MantisBT: Authorization Bypass in Global Profile Creation
V. Comments for CVE-2026-37978
No comments yet