What’s Vulnerable › Vulnerabilities

CVE-2026-79678: Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-07 · updated 2026-10-26
• Weakness: CWE-95

Description

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion.

Affected products

• Red Hat Enterprise Linux 10: all versions — fixed in 0:4.13.4-1.el10_2
• Red Hat Enterprise Linux 10.0 Extended Update Support: all versions — fixed in 0:4.12.2-15.el10_0.7
• Red Hat Enterprise Linux 8: all versions — fixed in 8100020261007070536.823393f5, 8100020261007071200.143e9e98
• Red Hat Enterprise Linux 8.8 Telecommunications Update Service: all versions — fixed in 8080020261007071832.b0a6ceea, 8080020261007080925.e581a9e4
• Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: all versions — fixed in 8080020261007071832.b0a6ceea, 8080020261007080925.e581a9e4
• Red Hat Enterprise Linux 9: all versions — fixed in 0:4.13.4-1.el9_8
• Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: all versions — fixed in 0:4.10.1-12.el9_2.7
• Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: all versions — fixed in 0:4.11.0-15.el9_4.9
• Red Hat Enterprise Linux 9.6 Extended Update Support: all versions — fixed in 0:4.12.2-14.el9_6.8

How to fix

Upgrade to a fixed version: Red Hat Enterprise Linux 10 0:4.13.4-1.el10_2; Red Hat Enterprise Linux 10.0 Extended Update Support 0:4.12.2-15.el10_0.7; Red Hat Enterprise Linux 8 8100020261007070536.823393f5, 8100020261007071200.143e9e98; Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020261007071832.b0a6ceea, 8080020261007080925.e581a9e4; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020261007071832.b0a6ceea, 8080020261007080925.e581a9e4; Red Hat Enterprise Linux 9 0:4.13.4-1.el9_8; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:4.10.1-12.el9_2.7; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 0:4.11.0-15.el9_4.9; Red Hat Enterprise Linux 9.6 Extended Update Support 0:4.12.2-14.el9_6.8. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/errata/RHSA-2026:70564
• https://access.redhat.com/errata/RHSA-2026:72279
• https://access.redhat.com/errata/RHSA-2026:82935
• https://access.redhat.com/errata/RHSA-2026:83083
• https://access.redhat.com/errata/RHSA-2026:83084
• https://access.redhat.com/errata/RHSA-2026:83085
• https://access.redhat.com/errata/RHSA-2026:83460
• https://access.redhat.com/errata/RHSA-2026:83461
• https://access.redhat.com/errata/RHSA-2026:89836
• https://access.redhat.com/security/cve/CVE-2026-79678
• https://bugzilla.redhat.com/show_bug.cgi?id=2523356

Get alerted when CVE-2026-79678 or the next vulnerability affects your stack