CVE-2026-15572

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A flaw exists in the Dynamic Client Registration (DCR) security policy management. The Allowed Protocol Mapper Types policy, designed to restrict the types of data mappers a client can utilize, does not re-validate the mapper type during a client update if the configuration remains unchanged. An attacker with client registration privileges can bypass this policy by registering an allowed mapper type and subsequently swapping it for a restricted, high-privilege mapper type that hardcodes administrative roles, leading to full administrative access to the Keycloak realm.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.