What is the CVSS score of CVE-2025-14083?

CVE-2025-14083 has a CVSS 3.1 base score of 2.7 (Low). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of REST API. This are affected by CVE-2025-14083?

CVE-2025-14083 is a low-severity vulnerability in A flaw involving access control (CVSS 2.7).

How to fix or mitigate CVE-2025-14083?

During next maintenance window: Apply vendor patches when convenient. Verify access control controls are in place.

REST API. This CVE-2025-14083

LOW

Improper Access Control (CWE-284)

2026-01-21 secalert@redhat.com

GHSA-594w-2fwp-jwrc

Privilege Escalation Authentication Bypass

2.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

2.7 LOW

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 21, 2026 - 13:16 nvd

LOW 2.7

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

45 maven packages depend on org.keycloak:keycloak-services (24 direct, 21 indirect)

Ecosystem-wide dependent count for version 26.2.5.

DescriptionCVE.org

A flaw was found in the Keycloak Admin REST API. This vulnerability allows the exposure of backend schema and rules, potentially leading to targeted attacks or privilege escalation via improper access control.

AnalysisAI

Technical ContextAI

Classified as CWE-284 (Improper Access Control). A flaw was found in the Keycloak Admin REST API. This vulnerability allows the exposure of backend schema and rules, potentially leading to targeted attacks or privilege escalation via improper access control.