CVE-2026-18571

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A flaw exists in the user creation component when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. This issue allows a sub-administrator who has permission to create users to assign those users to any group, including groups the sub-administrator is not authorized to manage. This could result in elevated privileges for the new users or unauthorized access to sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.