CyberRota Analysis
AI-GeneratedA vulnerability exists in the legacy client-initiated account-linking endpoint of Keycloak, allowing attackers to exploit predictable hash mechanisms to forge valid linking URLs. This can lead to full account takeover, enabling attackers to authenticate as the victim. Organizations using Keycloak for identity and access management should prioritize addressing this flaw to protect user accounts from unauthorized access.
Original NVD Description
A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC client. By tricking a user into authenticating, an attacker-controlled client can forge a valid linking URL to connect the victim's account to an attacker's external identity. This results in a full account takeover, allowing the attacker to log in as the victim.