A vulnerability has been found in Red Hat Keycloak and classified as critical. This affects the function
SubjectConfirmationData of the component SAML Brokering. The manipulation leads to privilege escalation.
This vulnerability is referenced as CVE-2026-1190. The attack needs to be initiated within the local network. No exploit is available.