CVE-2026-18207: Keycloak-services: keycloak-services: client policy source-group condition bypass via duplicate group name matching
A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership by name instead of a unique identifier. An attacker with client management privileges could bypass security policies by joining a group with a matching name in a different part of the group hierarchy, potentially allowing them to register or update clients without following required security hardening profiles.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18207?
The severity of CVE-2026-18207 is medium with a score of 6.5.
How do I fix CVE-2026-18207?
To fix CVE-2026-18207, ensure unique group identifiers are used instead of names in the client policy enforcement mechanism.
What types of attacks are possible with CVE-2026-18207?
An attacker with client management privileges can bypass security policies by creating a group with a duplicate name.
Which systems are affected by CVE-2026-18207?
CVE-2026-18207 affects the Keycloak services.
What does the vulnerability in CVE-2026-18207 entail?
CVE-2026-18207 involves a bypass of client policy enforcement due to incorrect group membership checks based on name matching.