CVE-2026-9705

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A flaw in the client registration service allows a remote attacker with a previously issued Registration Access Token (RAT) to re-enable a client that was explicitly disabled by an administrator. This bypasses security controls, enabling the attacker to reset the client secret and potentially regain privileged API access, leading to unauthorized information disclosure and integrity compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.