A vulnerability in the Keycloak Admin CLI (kcadm) tool allows an attacker who can intercept network traffic to impersonate the Keycloak server when a custom truststore is used. The tool incorrectly accepts any self-signed certificate if the hostname matches, enabling credential theft and unauthorized administrative actions.