A flaw in the authentication session handling of the keycloak-services component in Keycloak allows an attacker who has already authenticated to trigger a race condition while resetting credentials, causing the system to associate their authentication state with another user's session. This can result in the attacker gaining full access to the victim’s account and changing the victim’s password, effectively taking over the account.

The vulnerability affects Red Hat Build of Keycloak and Red Hat Single Sign‑On 7. Specific affected versions are not listed in the available data, so all deployments of these products remain at risk until a patch is applied.

The CVSS score of 7.5 indicates a high‑severity vulnerability. The EPSS score is not available, and the issue is not yet listed in CISA KEV. The attacker must first be authenticated to the system and can trigger the exploit by accessing the reset‑credentials path, suggesting a remote web‑interface attack vector. Even though the attacker requires an initial authenticated session, the race condition can redirect that session to a different user, enabling account takeover without further privileges.