A vulnerability in Keycloak's administrative services allows a highly privileged attacker with the 'manage-clients' role to escalate privileges to 'realm-admin' by manipulating client configurations such as JSON Web Key Sets, authenticator types, and secrets. This flaw enables unauthorized access to sensitive resources within the Keycloak realm. The issue has a medium severity rating with a CVSS score of 6.5. Currently, no effective mitigation or patch meeting Red Hat's criteria is available.