Tag

client-secret

Articles tagged with client-secret.

keycloak-operations

Keycloak Client Secret Rotation in 26.8: How It Works

Keycloak 26.8 makes client secret rotation supported: two secrets overlap during a rotation, but nothing rotates on a timer and…

Guilliano MolaireGuilliano Molaire8 min read
security

CVE-2026-17048: Keycloak's Admin REST API Can Hand Back a Vault-Resolved Client Secret

CVE-2026-17048 lets a view-only Keycloak admin read the plaintext of a vault-backed rotated client secret. CVSS 5.5, fixed in 26.7.2…

Guilliano MolaireGuilliano Molaire9 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

Start Free TrialTalk to Sales
© 2026 Skycloak. All Rights Reserved. Design by Yasser SolimanKeycloak™ is a trademark of the Linux Foundation. Skycloak is not affiliated with the Keycloak project.