A vulnerability in the SMTP email configuration handling of the keycloak-services component allows fallback from encrypted to unencrypted communication when STARTTLS is enabled. This flaw permits an attacker intercepting network traffic to capture sensitive email credentials and message content in plaintext.