{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2026-114232/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:keycloak:keycloak:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-114232"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Keycloak"],"_cs_severities":["high"],"_cs_tags":["cve-2026-114232","authorization-bypass","keycloak","web-application"],"_cs_type":"advisory","_cs_vendors":["Keycloak"],"content_html":"\u003cp\u003eA security flaw (CVE-2026-114232) exists in the UserManagedPermissionService component of the Keycloak authorization server. The UMA Protection API fails to validate the 'resourceType' field when processing policy creation requests. This oversight allows an authenticated user to create policies targeting resources they do not own, potentially enabling unauthorized access to or modification of sensitive data within the same realm.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows authenticated users to escalate privileges by manipulating access control policies. This could lead to unauthorized access to, or modification of, resources managed by other users within the Keycloak environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all Keycloak instances within the organization to identify versions utilizing the vulnerable UserManagedPermissionService.\u003c/li\u003e\n\u003cli\u003eMonitor the Keycloak authorization server logs for unusual API call patterns related to UMA policy creation.\u003c/li\u003e\n\u003cli\u003ePrioritize the application of vendor-supplied patches as soon as they become available to address this authorization logic flaw.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-05T18:23:09Z","date_published":"2026-11-05T18:23:09Z","id":"https://feed.craftedsignal.io/briefs/2026-11-keycloak-authorization-bypass/","summary":"An authorization bypass vulnerability in the Keycloak UserManagedPermissionService allows authenticated attackers to create policies for resources owned by other users due to insufficient validation of the resourceType field.","title":"Keycloak: UMA Protection API authorization bypass (CVE-2026-114232)","url":"https://feed.craftedsignal.io/briefs/2026-11-keycloak-authorization-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2026-114232","version":"https://jsonfeed.org/version/1.1"}