Skip to main content
EPSS 0.4%top 72%

CVE-2025-14777: Authentication Bypass by Alternate Name in Red Hat Red Hat build of Keycloak 26.4

0
Medium
VulnerabilityCVE-2025-14777cvecve-2025-14777
Published: 12/16/2025 (12/16/2025, 05:02:42 UTC)
Source: CVE Database V5
Vendor/Project: Red Hat
Product: Red Hat build of Keycloak 26.4

Description

A flaw was found in Keycloak. An IDOR (Broken Access Control) vulnerability exists in the admin API endpoints for authorization resource management, specifically in ResourceSetService and PermissionTicketService. The system checks authorization against the resourceServer (client) ID provided in the API request, but the backend database lookup and modification operations (findById, delete) only use the resourceId. This mismatch allows an authenticated attacker with fine-grained admin permissions for one client (e.g., Client A) to delete or update resources belonging to another client (Client B) within the same realm by supplying a valid resource ID.

CVSS v3.1

Score 6.0medium

Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/05/2026, 13:42:10 UTC

Technical Analysis

This vulnerability is an IDOR (Insecure Direct Object Reference) in the Keycloak admin API endpoints for authorization resource management, specifically in ResourceSetService and PermissionTicketService. The system verifies authorization against the resourceServer (client) ID provided in the API request, but the backend operations (findById, delete) only use the resourceId, allowing an attacker with admin permissions on one client to manipulate resources of another client within the same realm by supplying a valid resource ID. This flaw affects the Red Hat build of Keycloak 26.4 and was assigned CVE-2025-14777 with a CVSS 3.1 score of 6.0 (medium severity).

Potential Impact

An authenticated attacker with fine-grained admin permissions for one client can delete or update resources belonging to another client within the same realm. This can lead to unauthorized modification or deletion of resources, potentially disrupting service or causing data integrity issues. The confidentiality impact is low, integrity impact is high, and availability impact is low as per the CVSS vector.

Mitigation Recommendations

Red Hat has released an updated version, Red Hat build of Keycloak 26.4.11, which addresses this vulnerability. Users should back up their existing installations and apply the update as soon as possible. The vendor advisory provides official fixes and updated container images for OpenShift deployments. No other mitigation or workaround is indicated in the advisory.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Data Version
5.2
Assigner Short Name
redhat
Date Reserved
2025-12-16T04:56:14.486Z
Cvss Version
3.1
State
PUBLISHED
Vendor Advisory Urls
[{"url":"https://access.redhat.com/errata/RHSA-2026:6477","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:6478","vendor":"Red Hat"},{"url":"https://access.redhat.com/security/cve/CVE-2025-14777","vendor":"Red Hat"}]

Threat ID: 6940ec04a4f72ecfcafbad2a

Added to database: 12/16/2025, 05:20:04 UTC

Last enriched: 08/05/2026, 13:42:10 UTC

Last updated: 09/10/2026, 19:36:49 UTC

Views: 791

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses