CVE-2026-13097 is a privilege escalation vulnerability in FreeIPA caused by the 389-ds directory server's failure to properly enforce uniqueness constraints on Kerberos principal name attributes. Equivalent representations of the same principal name are not correctly accounted for, allowing an attacker with LDAP write privileges to create a service principal impersonating a privileged principal. This can result in unauthorized Kerberos service ticket acquisition for sensitive services and potentially full domain compromise. Red Hat's advisory confirms no mitigation or patch currently meets their standards, and the vulnerability carries a CVSS 3.1 base score of 9.1 (critical).

An attacker with sufficient LDAP write privileges can exploit this flaw to impersonate privileged Kerberos service principals, enabling unauthorized access to sensitive services via Kerberos tickets. This can lead to a complete compromise of the domain's security, affecting confidentiality, integrity, and availability of services relying on Kerberos authentication.

Currently, no official fix or patch is available for this vulnerability. Red Hat states that existing mitigation options do not meet their criteria for ease of use, deployment, or applicability. Users should monitor Red Hat advisories for updates and consider restricting LDAP write privileges as a precautionary measure until a fix is released.