The flaw is in the key provider component of the keycloak‑services library, where an incomplete path‑probing fix allows a realm administrator to submit arbitrary filesystem paths as keystore parameters. This permits the administrator to determine whether specific files exist and whether they are readable, potentially exposing sensitive system information. The weakness is a directory traversal scenario, identified as CWE‑22.

Red Hat Build of Keycloak and Red Hat Single Sign‑On 7 are affected. No specific affected version ranges are provided in the current data, so all installed instances of these products that have not yet applied a vendor patch are at risk.

The CVSS score of 4.9 indicates moderate severity and the EPSS score is not available, meaning there is no publicly known evidence of exploitation but the vulnerability remains potentially exploitable. The flaw is not tracked in the CISA KEV catalog, reducing the likelihood of current widespread exploitation. However, exposure of system files could lead to privilege escalation or further lateral movement if an attacker gains administrative access or can influence a realm administrator’s configuration.