CVE-2025-1391

Summary

CVE-2025-1391 is a vulnerability affecting the Keycloak organization feature. This issue allows incorrect assignment of organizations to users based on their username or email matching the domain pattern. The flaw occurs at the mapper level, leading to misrepresentation in tokens. Consequently, applications that rely on these claims for authorization may grant unauthorized access or privileges to users who are not members of the assumed organization.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.