GHSA-f5p5-6xmx-p252 - Keycloak vulnerable to authorization bypass via incorrect uri comparison
### Description
A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied page path within a request URL, either as a path segment or a query parameter, an attacker can gain unauthorized access to protected resources.
HIGH
Severity & confidence
Source severityhigh
Platform severityhigh
Confidencemedium
Exploitationunknown
CVSS8.1
Affected
Vendorsorg.keycloak:keycloak-servicesorg.keycloak:keycloak-policy-enforcer
Productsorg.keycloak:keycloak-servicesorg.keycloak:keycloak-policy-enforcer
Reporting sources (1)
GitHub Security Advisories
Timeline & provenance
Published2026-10-29T16:37:26
Last updated2026-11-05T15:48:34
Ingested2026-10-29T16:43:21
FreshnessNEAR-REAL-TIME
Threat typeadvisory
Recommended action
Review the advisory and upgrade affected packages to the first patched version.
Next steps
- Identify affected systems in your environment.
- Apply the vendor patch or mitigation guidance.
- Review logs for indicators described in the advisory.
- Follow the affected vendor/product to track updates.
Confidence explanation
Reported by a single or secondary source; treat as indicative, verify before acting.
Source type: vendor ยท Original: GitHub Security Advisories