MEDIUM 4.6 GitHub
CVE-2026-9799
Keycloak allows unauthorized access to resources via uma permission ticket bypass
### Description
A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access (UMA) permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows the user to gain unauthorized access to all resources of that type within the same resource server, even if they do not have a ticket for those specific resources. This vulnerability requires the resource server to be config
Affected Products
- maven/org.keycloak:keycloak-services < 26.6.4
References
- https://github.com/advisories/GHSA-w3p3-7cjg-vgfw
- https://github.com/keycloak/keycloak/security/advisories/GHSA-w3p3-7cjg-vgfw
- https://nvd.nist.gov/vuln/detail/CVE-2026-9799
- https://access.redhat.com/errata/RHSA-2026:30049
This medium severity vulnerability with a CVSS score of 4.6 was published on 2026-10-29 via GitHub. Affected: maven/org.keycloak:keycloak-services < 26.6.4.
vulnfeed aggregates 16884 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.