Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission_CVE-2026-3121

6.5 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Description

A flaw was found in Keycloak. An administrator with `manage-clients` permission can exploit a misconfiguration where this permission is equivalent to `manage-permissions`. This allows the administrator to escalate privileges and gain control over roles, users, or other administrative functions within the realm. This privilege escalation can occur when admin permissions are enabled at the realm level.

Basic Information

ID CVE-2026-3121

Source redhat

Published Mar 26, 2026 at 19:13

Modified Apr 2, 2026 at 16:39

Affected Product

Vendor Red Hat

Product Red Hat build of Keycloak 26.4

Version 26.4.11-1

CWE Classification

CWE-266

References

{
    "lastseen": "",
    "description": "A flaw was found in Keycloak. An administrator with `manage-clients` permission can exploit a misconfiguration where this permission is equivalent to `manage-permissions`. This allows the administrator to escalate privileges and gain control over roles, users, or other administrative functions within the realm. This privilege escalation can occur when admin permissions are enabled at the realm level.",
    "published": "2026-03-26T19:13:26.086Z",
    "modified": "2026-04-02T16:39:35.672Z",
    "type": "cve",
    "title": "Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission",
    "source": "redhat",
    "references": "https://access.redhat.com/errata/RHSA-2026:6477\nhttps://access.redhat.com/errata/RHSA-2026:6478\nhttps://access.redhat.com/security/cve/CVE-2026-3121\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2442277",
    "id": "CVE-2026-3121",
    "bulletinFamily": "",
    "cwe": [
        "CWE-266"
    ],
    "cvelist": null,
    "sourceData": "",
    "sourceHref": "",
    "cvss": {
        "score": 6.5,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Red Hat build of Keycloak 26.4",
    "version": "26.4.11-1",
    "vendor": "Red Hat",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}