A vulnerability was found in Red Hat Keycloak. It has been rated as critical. This issue affects some unknown processing of the component resource_set Endpoint. The manipulation leads to improper access controls.

This vulnerability is traded as CVE-2026-4628. It is possible to initiate the attack remotely. There is no exploit available.