CVE-2026-18201

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A flaw exists in the administrative API used to manage identity providers and organizations. An administrator with permissions to manage identity providers can link a new provider to an organization even if they lack the necessary permissions to manage that specific organization. This allows an unauthorized administrator to influence the authentication process for users of affected organizations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.