A flaw in the installation provider and client registration endpoints allows a realm administrator with the read‑only view‑clients role to read the active primary secret of any confidential client. The exposed client secret can be used to impersonate that client and obtain the service account permissions associated with it, compromising confidentiality and potentially allowing unauthorized access. The weakness is an information‑exposure flaw (CWE‑200).

Red Hat Build of Keycloak and Red Hat Single Sign‑On 7 are affected. The specific versions are not disclosed in the advisory, but the vulnerability applies to the installation provider and client registration services of these product families.

The CVSS score of 4.9 indicates a moderate severity, while the EPSS score is not available, suggesting limited data on exploitation frequency. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires authenticated access to the installation provider or client registration endpoint with a user possessing the view‑clients role. Once the attacker obtains the primary client secret, they can forge client credentials and gain unauthorized service‑account authority.