[NVD] CVE-2026-18201 (MEDIUM 5.5) — Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without having the required permissions to

CVE-2026-18201 CVSS: 5.5 MEDIUM Published: 2026-07-29T10:16:40.620

Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without having the required permissions to manage that organization. This could allow an unaut