keycloak-admin-cli vulnerabilities

CVEs whose affected-version data names the keycloak-admin-cli package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-96453High· 8.0

yesterday

Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates

A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from the command line. When a custom truststore is provided to verify the server identity, the tool incorrectly accepts any…

▾ TwilightRed Hat · keycloak-corevia CVEORG