Threats Tagged 'cve-2026-14613'

Multiple critical security vulnerabilities have been identified in Red Hat build of Keycloak 26.6.6 images used within OpenShift Container Platform. These include privilege escalation via a TOCTOU vulnerability, unauthenticated account takeover, leakage of rotated client secrets, predictable account-linking hashes enabling account takeover, and unauthorized disclosure of hidden group metadata. Red Hat has released updated container images to address these issues for on-premise and private cloud deployments.

Red Hat has issued a critical security update for its build of Keycloak 26.6.6, addressing multiple vulnerabilities including privilege escalation via a TOCTOU flaw, unauthenticated account takeover, information disclosure, and predictable hashes enabling account takeover. The update fixes five CVEs affecting authentication and authorization components. Users are advised to back up their installations before applying the update.

CVE-2026-14613 is a medium severity vulnerability in Red Hat build of Keycloak 26.6 affecting its Fine-Grained Admin Permissions (FGAP v2). It allows certain administrators with permission to view a specific role to also see metadata of all groups assigned to that role without verifying if they have permission to view those groups. This results in unauthorized disclosure of hidden group details, including internal names and custom settings, which may contain sensitive deployment information. Red Hat has released fixed versions 26.6.6 and 26.7.2 to address this issue.

A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see information about groups they shouldn't have access to. When the new Fine-Grained Admin Permissions (FGAP v2) are turned on, an administrator who is allowed to see a specific "role" can also see a list of all groups assigned to that role. The system fails to check if the administrator has permission to see those specific groups. This could allow a restricted administrator to discover "hidden" groups and see their details, such as internal names and custom settings, which might contain sensitive deployment information.