CVE-2026-14613

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description An issue in the administrative interface occurs when Fine-Grained Admin Permissions (FGAP v2) are enabled. An administrator with permission to view a specific role can access a list of all groups assigned to that role because the system fails to verify if the administrator has the necessary permissions to view those specific groups. This allows restricted administrators to discover hidden groups and access metadata, including internal names and custom settings, which may contain sensitive deployment information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.