CVE-2026-14615

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A flaw exists in the Fine-Grained Admin Permissions (FGAP) v2 implementation within the administrative services. When FGAP v2 is enabled, the system does not correctly filter child groups based on the caller's permissions when accessed via a parent group. This allows a delegated administrator to bypass permission filters and view details of child groups they are not authorized to access, including group names, paths, and custom attributes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.