Security Advisory

CVE-2025-14082

2.7
LOW

Vulnerability Description

A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.
Published Date December 10, 2025
Official Source NIST NVD Advisory