CVE-2026-1180 | Red Hat Keycloak OpenID Connect Dynamic Client Registration server-side request forgery

A vulnerability has been found in Red Hat Keycloak and classified as critical. This issue affects some unknown processing of the component OpenID Connect Dynamic Client Registration. The manipulation leads to server-side request forgery.

This vulnerability is traded as CVE-2026-1180. It is possible to initiate the attack remotely. There is no exploit available.