Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-94213— Keycloak-services: keycloak-services: authorization services policy evaluation endpoint leaks user identity

Quick assessment

Affected
Red Hat Red Hat Build of Keycloak
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在开源身份与访问管理解决方案 Keycloak 的授权服务（Authorization Services）组件中，发现存在一个漏洞。该问题出现在策略评估端点（policy evaluation endpoint）中，该端点由管理员用于测试访问策略如何应用于特定用户。由于缺乏适当的授权检查，拥有受限查看权限的委派管理员（delegated administrator）可以访问该领域（realm）中任意用户的完整个人资料和角色信息，即使他们本无权查看用户详细信息。这可能导致敏感信息泄露，例如电子邮件地址和已分配的安全角

CVSS 4.9 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-94213

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Keycloak-services: keycloak-services: authorization services policy evaluation endpoint leaks user identity
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management solution. The issue occurs in the policy evaluation endpoint, which is used by administrators to test how access policies apply to specific users. Due to missing authorization checks, a delegated administrator with limited viewing privileges can access the full profile and role information of any user in the realm, even if they are not permitted to view user details. This could lead to the exposure of sensitive information such as email addresses and assigned security roles.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat Build of Keycloak - cpe:/a:redhat:build_keycloak:
Red Hat Red Hat Build of Keycloak - cpe:/a:redhat:build_keycloak:
Red Hat Red Hat Build of Keycloak - cpe:/a:redhat:build_keycloak:
Red Hat Red Hat Single Sign-On 7 - cpe:/a:redhat:red_hat_single_sign_on:7

II. Public POCs for CVE-2026-94213

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-94213

请登录查看更多情报信息。

Other References for CVE-2026-94213 (2)

Same Patch Batch · Red Hat · 2026-09-21 · 4 CVEs total

CVE-2026-94215 5.5 MEDIUM Keycloak-services: keycloak-services: cross-realm client read/write via request-level cach
CVE-2026-94217 3.5 LOW Keycloak-services: keycloak-services: uma scope merge across resource owners via resource
CVE-2026-94218 3.1 LOW Keycloak-services: keycloak-services: 2fa setup enforcement bypass via authentication sess

IV. Related Vulnerabilities

Same product: Red Hat Build of Keycloak
Same vendor: Red Hat
Same weakness: CWE-862

V. Comments for CVE-2026-94213

No comments yet

Leave a comment