A vulnerability classified as critical was found in Keycloak. Affected is an unknown function of the component IdentityBrokerService. Executing a manipulation can lead to improper authentication.
This vulnerability is handled as CVE-2026-3009. The attack can only be done within the local network. There is not any exploit available.
