4.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-9791

CVE-2026-9791: Keycloak Vulnerable to Incorrect Authorization

A flaw was found in Keycloak. An authenticated user with existing organization membership can exploit this flaw by accessing user-facing APIs, such as the account API or by requesting an OpenID Connect (OIDC) token with the 'organization' scope. This allows organization metadata to be disclosed in tokens, even after an administrator has explicitly disabled the Organizations feature, potentially leading to incorrect authorization decisions by resource servers.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-9791

CVE-2026-9791:

4.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation NoneAutomatable NoTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
org.keycloak:keycloak-server-spi-private	maven	>= 26.5.0, < 26.6.3	26.6.3
org.keycloak:keycloak-services	maven	>= 26.5.0, < 26.6.3	26.6.3
org.keycloak:keycloak-server-spi-private	maven	<= 26.4.7
org.keycloak:keycloak-services	maven	<= 26.4.7

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists because multiple functions throughout the Keycloak codebase that handle organization-related features failed to properly check if the 'Organizations' feature was enabled for the current realm. Instead of checking the realm-specific setting, the code often relied on a global feature flag (Profile.isFeatureEnabled) or had no check at all. This allowed authenticated users who were part of an organization to access organization data through user-facing APIs (e.g., the account API) or by requesting an OIDC token with the 'organization' scope, even after an administrator had explicitly disabled the feature for that realm. The patch introduces a centralized Organizations.isEnabled(session) method that correctly checks the realm-level configuration and applies this check to all the affected functions, thus preventing the information disclosure.

Vulnerable functions

org.keycloak.services.resources.account.AccountRestService.organizations

services/src/main/java/org/keycloak/services/resources/account/AccountRestService.java

The `organizations` method in `AccountRestService` is an endpoint for the account API. Before the patch, it only checked if the organization feature was enabled globally using `Profile.isFeatureEnabled(Feature.ORGANIZATION)`. This allowed authenticated users to retrieve organization information via the API even if the feature was explicitly disabled for their realm, leading to information disclosure.

org.keycloak.email.freemarker.beans.ProfileBean.getOrganizations

services/src/main/java/org/keycloak/email/freemarker/beans/ProfileBean.java

The `getOrganizations` method in `ProfileBean` is used to fetch organization data for user profiles, which can be displayed in account management pages or included in emails. The original code did not properly check if the organization feature was enabled for the realm, causing it to leak organization memberships of a user even when the feature was disabled.

org.keycloak.organization.protocol.mappers.oidc.OrganizationGroupMembershipMapper.setClaim

services/src/main/java/org/keycloak/organization/protocol/mappers/oidc/OrganizationGroupMembershipMapper.java

The `setClaim` method is responsible for adding organization-related claims to OIDC tokens. The vulnerability lies in the fact that this method would add claims to the token even if the organization feature was disabled for the realm, as it lacked a proper check. This could lead to incorrect authorization decisions by resource servers that consume these tokens.

org.keycloak.protocol.oidc.TokenManager.getRequestedClientScopes

services/src/main/java/org/keycloak/protocol/oidc/TokenManager.java

This function processes OIDC scope requests. Before the patch, it would approve the 'organization' scope even when the feature was disabled at the realm level. This would subsequently cause other vulnerable functions to include organization data in the token, leading to information disclosure.

org.keycloak.authentication.actiontoken.inviteorg.InviteOrgActionTokenHandler.handleToken

services/src/main/java/org/keycloak/authentication/actiontoken/inviteorg/InviteOrgActionTokenHandler.java

This method handles action tokens for organization invitations. It was vulnerable because it did not check if the organization feature was enabled for the realm, allowing the invitation process to proceed. This could lead to users being associated with organizations in a disabled context.

org.keycloak.authentication.actiontoken.inviteorg.InviteOrgActionTokenHandler.preHandleToken

services/src/main/java/org/keycloak/authentication/actiontoken/inviteorg/InviteOrgActionTokenHandler.java

Similar to `handleToken`, this method prepares the system to handle an organization invitation token. It was vulnerable for the same reason: lack of a check to see if the organization feature was enabled for the realm.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.