A flaw was found in the org.keycloak.services.clientregistration Java package in Keycloak. The Dynamic Client Registration GET endpoint at /realms/{realm}/clients-registrations/default/{clientId} fails to mask the client secret in its response. While a similar issue was previously fixed for the Admin REST API, this specific endpoint was overlooked. An authenticated attacker with the view-clients role can exploit this to retrieve the cleartext secret of any confidential client in the realm. With this secret, the attacker can perform actions such as obtaining access tokens via the client credentials grant, potentially leading to full realm compromise if the client's service account has elevated permissions.