Executive brief
Duplicate Advisory: Keycloak has privilege escalation via improper scope mapping enforcement
Affected products
- Maven org.keycloak:keycloak-services
Junglewise Threat Intelligence
Duplicate Advisory: Keycloak has privilege escalation via improper scope mapping enforcement
Severity: low · CVSS 3.1 · Published 2026-05-28
Technologies: org.keycloak:keycloak-services (Maven). Vendors: Maven.
Related threats
- Keycloak information disclosure via user profile permission bypass in group members endpoint
- Keycloak privilege escalation in Fine-Grained Admin Permissions scope mapping
- Keycloak privilege escalation in Fine-Grained Admin Permissions
- Keycloak signature policy bypass in JWE-encrypted request objects
- Keycloak privilege escalation via oversized subject_token JWT