This vulnerability in Red Hat Build of Keycloak allows a realm administrator with the 'manage-realm' role to perform path traversal by submitting arbitrary filesystem paths as a keystore parameter during key provider component creation. This improper limitation of pathname access enables the attacker to determine the existence and readability of arbitrary files accessible to the Keycloak process. The disclosed information could be leveraged to identify sensitive files for further attacks. The vulnerability is rated medium severity with a CVSS 3.1 score of 4.9 (Network attack vector, low complexity, high privileges required, no user interaction, confidentiality impact only). No remediation level or patch availability is stated in the vendor advisory.

An attacker with realm administrator privileges can probe arbitrary filesystem paths to discover which files exist and are readable by the Keycloak process. This leads to information disclosure of potentially sensitive files. There is no direct integrity or availability impact reported. The disclosed information could facilitate subsequent targeted attacks.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-9083 for current remediation guidance. Since no official fix or workaround is stated, organizations should monitor the advisory for updates. Restricting the assignment of the 'manage-realm' role to trusted administrators may reduce risk.