CVE-2026-18203Disclosure(redhat / build_of_keycloak)

LOWCVSS 6.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend permissions to child groups, the system incorrectly uses a simple text-based prefix check to verify group membership. This allows a user who belongs to a different group with a similar starting name to bypass security checks and gain unauthorized access to administrative functions or protected resources.

redhat CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

build_of_keycloak

Threat summary

2 mentions across 1 observed day

What's happening

Disclosure: 1 classified signal
General: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

redhat

Products

build_of_keycloak

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud91d
General
🚨*CVE* CVE-2026-18203 A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend permissions to chi… https://www.cve.org/CVERecord?id=CVE-2026-18203 ----- Traducción: Se encontró una fa… http://infoflow.cloud`
Post summary
The tweet announces a Keycloak group‑policy evaluation flaw (CVE‑2026‑18203) but does not provide evidence of a PoC, exploit, patch, or ongoing exploitation. It serves primarily as a disclosure notice.
0000038
96 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-18203 A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend permissions to chi… https://www.cve.org/CVERecord?id=CVE-2026-18203
Post summary
The snippet reports a newly discovered flaw affecting Keycloak’s group policy evaluation logic, with no proof‑of‑concept, exploit details, or patch information provided.
00000829
57.9K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	redhat	build_of_keycloak	-	-	-

Explore more

Back to dashboard redhat CVEs build_of_keycloak vulnerabilities