Update your Keycloak
For community, version 26.7.2 has the fix:
https://www.keycloak.org/2026/08/keycloak-2672-released
You must log in or register to comment.
This one is bad - unauthenticated user account take over.
If you’re like me and only using it internally on a homelab, the risks are lessened, but if you expose keycloak to by the Internet - boy howdy
Out of curiosity, what is the advantage of using something like this on LAN only?
Not being impacted by security issues like these for one
