CVE-2026-3911

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description An issue exists in Keycloak where an authenticated user possessing the view-users role can access and retrieve user attributes intended to be hidden. This occurs through exploitation of a flaw within the UserResource component by accessing a specific administrative endpoint. This unauthorized access leads to information disclosure of sensitive user data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.