A vulnerability was found in Red Hat Keycloak. It has been declared as critical. This affects an unknown function of the component WebAuthn Attestation Statement Verification. The manipulation results in state issue.

This vulnerability is identified as CVE-2025-12150. The attack can be executed remotely. There is not any exploit available.