CVE-2026-9064 affects the Red Hat Directory Server 13.2 container image for RHEL 10. The vulnerability is associated with CWE-770, which typically involves allocation of resources without limits or throttling, potentially leading to resource exhaustion or denial of service. Red Hat has released an updated container image that includes security patches and bug fixes to address this issue. The updated image can be pulled from the Red Hat container registry using the specified podman command. No known exploits in the wild have been reported. The advisory is identified as RHSA-2026:27125.

The vulnerability could allow an attacker to exploit resource management weaknesses in the affected container image, potentially causing denial of service or other resource exhaustion impacts. The severity is rated high by Red Hat, indicating a significant security risk if unpatched. However, no active exploitation has been observed in the wild to date.

Red Hat has provided an updated container image that addresses the vulnerability. Users should pull the latest Red Hat Directory Server 13.2 container image for RHEL 10 from the Red Hat container registry using the command: podman pull registry.redhat.io/dirsrv/dirsrv-container-rhel10:13.2. Applying this update is the recommended remediation. No additional mitigation steps are specified or required according to the vendor advisory.