CVE-2026-109081 | Red Hat Keycloak/Single Sign-On Dynamic Client Registration defaultRoles improper authorization

A vulnerability, which was classified as problematic, was found in Red Hat Keycloak and Single Sign-On. This impacts an unknown function of the component Dynamic Client Registration. The manipulation of the argument defaultRoles results in improper authorization.

This vulnerability was named CVE-2026-109081. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More