This vulnerability in Red Hat Build of Keycloak's FGAPv2 feature permits an administrator with restricted client management permissions to escalate privileges by assigning any realm role to a client's scope mapping. The flaw bypasses security controls, resulting in the injected role being projected into user authentication tokens, enabling unauthorized privilege escalation within the realm. The CVSS 3.1 score of 7.3 reflects a high-severity issue with network attack vector, high complexity, requiring privileges and user interaction, and impacts confidentiality and integrity with no availability impact. Red Hat has published an advisory but has not confirmed a patch or remediation level.

The vulnerability allows unauthorized privilege escalation by enabling limited administrators to assign highly privileged roles to client scope mappings. This leads to elevated privileges being granted to users via their authentication tokens when accessing the affected client, potentially compromising the confidentiality and integrity of the Keycloak realm. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-9795 for current remediation guidance. Until an official fix is available, organizations should review administrative permissions carefully and restrict client management privileges to trusted administrators only. Monitor Red Hat communications for updates on patches or mitigations.