The vulnerability in Red Hat Certificate System 10's pki-core component arises because the certificate authority renewal request path does not enforce the same realm-based authorization checks as the enrollment path. Consequently, an authenticated user with permissions in one realm can renew certificates in another realm without proper authorization. The CVSS 3.1 base score is 3.1, reflecting low impact with network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact.

The impact is limited to unauthorized certificate renewal across realms, potentially allowing an authenticated user to renew certificates they should not be authorized to renew. There is no impact on confidentiality or availability, and the integrity impact is low. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-17039 for current remediation guidance. No official fix or workaround is explicitly stated in the provided data. Until a patch is available, restrict authenticated user permissions to minimize cross-realm access where possible.