The vulnerability in Red Hat Certificate System 10's pki-core component arises because the certificate authority renewal request path does not enforce the same realm-based authorization checks as the enrollment path. Consequently, an authenticated user with permissions in one realm can renew certificates in another realm without that realm's authorization. The CVSS 3.1 base score is 3.1, reflecting low severity with network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and low integrity impact.

An authenticated user entitled to one realm can renew certificates belonging to a different realm without authorization from that realm. This could lead to unauthorized certificate renewals, potentially undermining certificate management policies. There is no impact on confidentiality or availability, and the integrity impact is limited to the renewal process.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-17039 for current remediation guidance. No official fix or temporary workaround is explicitly stated in the provided data. Users should monitor the vendor advisory for updates and apply any patches or recommended mitigations once available.