Tag
vault
Articles tagged with vault.
security
9 min read
CVE-2026-17048: Keycloak's Admin REST API Can Hand Back a Vault-Resolved Client Secret
CVE-2026-17048 lets a view-only Keycloak admin read the plaintext of a vault-backed rotated client secret. CVSS 5.5, fixed in 26.7.2…
9 min readkeycloak-operations10 min read
Managing Keycloak Secrets the Right Way (Vault SPI)
Keep secrets out of Keycloak config: use the vault SPI to resolve database, SMTP, and client secrets from a file-based…
10 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.