A flaw was found in the ipa-enrollment SLAPI plugin. (CVE-2026-73199)

CVE-2026-73199 is a null pointer dereference vulnerability in the ipa-enrollment SLAPI plugin. An authenticated remote client can trigger a server crash by sending a malformed LDAP extended operation that omits the JOIN_OID request value in the ipa-enrollment extended operation. This causes a denial of service due to the null pointer dereference. The vulnerability has a CVSS 3.1 base score of 6.5 with network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. No known exploits are reported in the wild. The vendor advisory from Red Hat recommends restricting LDAP network access to trusted clients and disabling the ipa-enrollment plugin if not required. No official patch or fix is currently available according to the advisory.

The vulnerability allows a remote authenticated attacker to cause a denial of service by crashing the LDAP server process through a null pointer dereference. There is no impact on confidentiality or integrity. The availability impact is high due to the server crash. No known active exploitation has been reported.

No official patch or fix is currently available. Red Hat recommends restricting network access to the LDAP service to trusted clients only by configuring firewall rules to allow connections only from known, trusted IP addresses or subnets. Additionally, if host enrollment functionality is not required, disabling the ipa-enrollment SLAPI plugin removes this attack surface and mitigates the vulnerability.