Status: UPDATED
| Advisory ID: CVE-2026-13097
Key Details
| CVE | CVE-2026-13097 |
| CVSS Score / Version | 8.7 (High) / CVSS v3.1 |
| Updated | 2026-09-28 |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N |
| CVSS Prose | attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is none. |
| Affected products | see table below |
| Classified as | CWE-706 (Use of Incorrectly-Resolved Name or Reference) |
Affected Products, Subsystems & Sectors
| Subsystems | OT Supporting Infrastructure |
| Sectors | All Sectors |
What to Know
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise. (NVD)
What to Do
Monitor Red Hat's and freeipa's web pages for any future patch releases. See vendor advisory link below.
References