CVE-2026-37979 | Keycloak on Red Hat Token Introspection Endpoint access control

A vulnerability was found in Keycloak on Red Hat. It has been rated as critical. The affected element is an unknown function of the component Token Introspection Endpoint. Performing a manipulation results in improper access controls.

This vulnerability was named CVE-2026-37979. The attack may be initiated remotely. There is no available exploit.