Threats Tagged 'cve-2026-79678'

A vulnerability in FreeIPA's idp-add command allows insufficiently validated input to reach an eval() call before LDAP access control checks. This flaw enables any authenticated IPA principal to enumerate and read environment variables of the server process and cause denial of service via memory exhaustion. The issue affects FreeIPA and has a high severity rating with a CVSS score of 8.1. Red Hat has issued a security advisory with a critical impact rating and released patches to address this vulnerability.

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion.

A critical vulnerability (CVE-2026-11861) was found in FreeIPA when a trust relationship is configured between FreeIPA and Active Directory. This flaw allows Active Directory users to obtain Ticket Granting Service (TGS) tickets with impersonating canonical names, potentially leading to unauthorized access. The issue is part of a broader set of security fixes addressing multiple vulnerabilities in FreeIPA, including unauthenticated denial of service, cross-site scripting, privilege escalation, and unauthorized LDAP writes. Red Hat has released updates for Red Hat Enterprise Linux 9 and related products to address these issues.