Red Hat Security Advisory

RHSA-2026:89836

idm:DL1 security, bug fix, and enhancement update

Released 2026-10-26 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) bind-dyndb-ldap-11.6-4.module+el8.6.0+21751+4d78cb83.3.src::idm:DL1, bind-dyndb-ldap-11.6-4.module+el8.6.0+21751+4d78cb83.3.x86_64::idm:DL1, custodia-0.6.0-3.module+el8.1.0+4098+f286395e.noarch::idm:DL1 +47
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) bind-dyndb-ldap-11.6-4.module+el8.6.0+21751+4d78cb83.3.src::idm:DL1, bind-dyndb-ldap-11.6-4.module+el8.6.0+21751+4d78cb83.3.x86_64::idm:DL1, custodia-0.6.0-3.module+el8.1.0+4098+f286395e.noarch::idm:DL1 +47

Fixes 8 records

TI-2026-53517 CVE-2026-76578 · GHSA-cgrx-2q4j-9f37

Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci

MEDIUM 51

A flaw was found in FreeIPA.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01312 Published 2026-09-07 Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-306

TI-2026-10236 CVE-2026-11861 · GHSA-g67c-jg9c-rqh2

Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships

MEDIUM 43

A flaw was found in FreeIPA.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00363 Published 2026-08-20 Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-266

TI-2026-11136 CVE-2026-13097 · GHSA-q4ph-46qc-4w6x

Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware…

MEDIUM 41

A privilege escalation flaw was found in FreeIPA.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00775 Published 2026-08-20 Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-706

TI-2026-51343 CVE-2026-73198 · GHSA-p44q-gpjc-mgm9

Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read

MEDIUM 40

A flaw was found in FreeIPA.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0054 Published 2026-08-20 Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +12 CWE-770

TI-2026-51342 CVE-2026-73197 · GHSA-m6vw-rcwj-pg9q

Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read

MEDIUM 40

A flaw was found in FreeIPA.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00587 Published 2026-08-20 Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-770

TI-2026-14934 CVE-2026-18147 · GHSA-8gwp-8p3v-22jh

Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url

LOW 38

A flaw was found in FreeIPA.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00577 Published 2026-09-09 Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-79

TI-2026-55176 CVE-2026-79678 · GHSA-2rwh-2wx9-4qwh

Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows…

LOW 37

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00898 Published 2026-09-07 Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +12 CWE-95

TI-2026-15901 CVE-2026-19550 · GHSA-6xg7-8fr6-8p33

Incorrect authorization in Red Hat Enterprise Linux 10

LOW 36

A flaw was found in FreeIPA.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00483 Published 2026-08-11 Fixed in 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-863