Search: CVE-2026-79678

CVE-2026-79678 is a vulnerability in FreeIPA's idp-add command where insufficient validation of certain inputs leads to a constrained eval() call before LDAP access control checks. This flaw allows any authenticated IPA principal to enumerate and read environment variables of the server process and cause denial of service via memory exhaustion. The vulnerability does not permit arbitrary code execution due to restrictions on the eval() call. The confidentiality impact varies by deployment method, with container-based deployments at higher risk of credential exposure. A fixed package is required to remediate this issue.