A flaw was found in Keycloak. An authenticated user can bypass configured WebAuthn policies during credential registration by manipulating client-side JavaScript. This occurs because the server-side processAction() fails to validate that the newly created credential's parameters, such as public key algorithms, match the realm's configured WebAuthn policies. This could lead to the creation of credentials that do not adhere to administrative security requirements, potentially weakening the overall security posture of the system by allowing non-compliant authentication methods.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in Keycloak. An authenticated user can bypass configured WebAuthn policies during
    credential registration by manipulating client-side JavaScript. This occurs because the server-side
    processAction() fails to validate that the newly created credential's parameters, such as public key
    algorithms, match the realm's configured WebAuthn policies. This could lead to the creation of credentials
    that do not adhere to administrative security requirements, potentially weakening the overall security
    posture of the system by allowing non-compliant authentication methods. (CVE-2026-8830)

ID	Name	Product	Family	Type	Severity
463325	Echo: keycloak-25: security update to 25.0.6+e1org.keycloak:keycloak-services: security update to 26.6.3	Tenable Cloud Security	Echo Local Security Checks	Local	medium
463325	Echo: keycloak-25: security update to 25.0.6+e1org.keycloak:keycloak-services: security update to 26.6.3	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
442655	SCA: security update for org.keycloak:keycloak-services (GHSA-g8vr-x4qh-25qg)	Tenable Cloud Security	SCA Checks	Local	medium
442655	SCA: security update for org.keycloak:keycloak-services (GHSA-g8vr-x4qh-25qg)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-8830

medium

Tenable Plugins

medium

medium

medium

medium