News Critical Keycloak Flaw Let Anyone Reset a Password and Take Over Any Account by Rebecca Sutton August 25, 2026 by Rebecca Sutton August 25, 2026 A critical Keycloak password reset flaw let unauthenticated attackers seize any account, admins included. Here is what happened and what to patch now. FacebookTwitterLinkedinEmail