CVEvulnerability
CVE-2025-14083
2.7 LOW
Official page ↗
- Status
- Deferred
- Published
- 2026-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-284
Description
A flaw was found in the Keycloak Admin REST API. This vulnerability allows the exposure of backend schema and rules, potentially leading to targeted attacks or privilege escalation via improper access control.
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://access.redhat.com/errata/RHSA-2026:6477 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:6478 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2025-14083 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2419086 bugzilla.redhat.com