A vulnerability was found in Keycloak on Red Hat. It has been rated as problematic. Impacted is an unknown function of the component Authentication Token Handler. The manipulation leads to incorrect privilege assignment.
This vulnerability is traded as CVE-2026-9795. It is possible to initiate the attack remotely. There is no exploit available.