High

Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore

Type: advisorySource: Official CVE List1 source record

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.

Announced 20 Aug 2026Group revision 1

Original source ↗

CVE-2026-13097

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-13097

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 10.0 Extended Update Support

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.6 Extended Update Support

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 6

Source reference: /containers/cna/affected/12/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 7

Source reference: /containers/cna/affected/13/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/14/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.13.4-1.el10_2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "ipa",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux_eus:10.0"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.12.2-15.el10_0.7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "ipa",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "8100020261007071200.143e9e98",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "idm:client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "8100020261007070536.823393f5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "idm:DL1",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020261007080925.e581a9e4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "idm:client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020261007071832.b0a6ceea",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "idm:DL1",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020261007080925.e581a9e4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "idm:client",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020261007071832.b0a6ceea",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "idm:DL1",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/a:redhat:enterprise_linux:9::crb"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.13.4-1.el9_8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "ipa",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.2::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.10.1-12.el9_2.7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "ipa",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.11.0-15.el9_4.9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "ipa",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.6::appstream",
      "cpe:/a:redhat:rhel_eus:9.6::crb"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.12.2-14.el9_6.8",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "ipa",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "packageName": "ipa",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "packageName": "ipa",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "packageName": "ipa",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  }
]

Related CVEs: CVE-2026-13097
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #28580 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 07:44:59 GMT
Publisher date: Thu, 20 Aug 2026 10:37:55 GMT

Read the original announcement

Revision history

25 Oct 2026CVE-2026-13097 · Revision 1Source updated