Vulnerability record/PUBLISHED/Published Sep 7, 2026 12:02:21 UTC
CVE-2026-79678
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion.
Base score8.1/ 10
SeverityHighCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityHigh
Attack vectorNetworkAV
Attack complexityLowAC
Privileges requiredLowPR
User interactionNoneUI
ScopeUnchangedS
Confidentiality impactHighC
Integrity impactNoneI
Availability impactHighA
CVSS vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authorityredhat
Last updatedNov 2, 2026 03:28:39 UTC
PublishedSep 7, 2026 12:02:21 UTC
ReservedAug 25, 2026 11:27:59 UTC
Credits
- Red Hat would like to thank Calif.io (in collaboration with Anthropic) for reporting this issue.