AIKIDO-2026-612610

TL;DR

A user who can create or edit a client's protocol mappers can inject a hardcoded-role mapper that writes admin roles into tokens issued for that client. Admin authorization then trusts those token role claims instead of the user's actual grants, so the attacker can self-escalate to realm-admin by authenticating through the client they manage. The fix stops treating mapper-injected role claims as authoritative for admin authorization decisions.