This vulnerability involves Samba's handling of certificate auto-enrollment Group Policy in Red Hat Enterprise Linux 10. Specifically, when certificate auto-enrollment is enabled, Samba may fetch a CA certificate via an unencrypted HTTP connection and install it into the local trust store without adequate verification. An attacker capable of intercepting or redirecting network traffic could exploit this to introduce a malicious CA certificate, potentially compromising trusted communications by enabling interception or spoofing. The CVSS v3.1 score is 8.0, indicating high severity with network attack vector requiring high attack complexity and no privileges or user interaction needed. The vendor advisory does not currently specify an available patch or remediation.

Successful exploitation could allow an attacker with network interception capabilities to insert a malicious CA certificate into the local trust store. This could lead to interception or spoofing of communications that rely on trusted certificates, compromising confidentiality and integrity. There is no indication of availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-3012 for current remediation guidance. Until a fix is available, consider disabling certificate auto-enrollment in Samba if feasible or restricting network paths to prevent interception or redirection of HTTP traffic used for certificate retrieval.