CVE-2025-12150

LowCVSS 3.1/10Last modified Aug 10, 2026

Description

A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the configured attestation policy and register untrusted or forged authenticators via submission of an attestation object with fmt: "none", even when the realm is configured to require direct attestation. This can lead to weakened authentication integrity and unauthorized authenticator registration.

Metrics

CVSS 3.1 3.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-347

Affected software

VendorProductVersions
Keycloakkeycloak< 26.4.4
Red HatRed Hat build of Keycloak 26.2—
Red HatRed Hat build of Keycloak 26.2—
Red HatRed Hat build of Keycloak 26.2—
Red HatRed Hat build of Keycloak 26.2.11—
Red HatRed Hat build of Keycloak 26.4—
Red HatRed Hat build of Keycloak 26.4—
Red HatRed Hat build of Keycloak 26.4—
Red HatRed Hat build of Keycloak 26.4.4—

References

Timeline

Published
Feb 27, 2026
Last modified
Aug 10, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-121516.4The Simple Folio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'portfolio_name' parameter in all versions up to,CVE-2025-121538.8The Featured Image via URL plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation function in all CVE-2025-121548.8The Auto Thumbnailer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadThumb() fCVE-2025-121557.1A Command Injection vulnerability, resulting from improper file path sanitization (Directory Traversal) in Looker allows an attacker with DeCVE-2025-121564.3The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin for WordPress is vulnerable to unauthorized modificatCVE-2025-121575.3The Simple User Capabilities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on thCVE-2025-121589.8The Simple User Capabilities plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the suc_submit_CVE-2025-121596.4The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_raw_content shortcode in all CVE-2025-12168.8A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the function selectNoticeListCVE-2025-121607.2The Simple User Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpr_admin_msg' parameter in all versCVE-2025-121618.8The Smart Auto Upload Images plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the auto-imCVE-2025-121636.4The Omnipress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1
CVE-2025-12150: Low severity, CVSS 3.1 | Vulnix