A vulnerability classified as
critical was found in
Red Hat Build of Keycloak, Data Grid, Fuse, JBoss Data Grid, JBoss Enterprise Application Platform, JBoss Enterprise Application Platform Expansion Pack, Process Automation and Single Sign-On. Affected by this vulnerability is an unknown functionality of the component
Wildfly Server Role Based Access Control Provider. The manipulation leads to improper access controls.
This vulnerability is known as
CVE-2025-23367. The attack can be launched remotely. There is no exploit available.