CVE-2026-79678
Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service
Published Sep 7, 2026 · updated Oct 15, 2026 · Red Hat Red Hat Enterprise Linux 10
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion.
Timeline
Detection, updates, and resolution for this record.
Sep 7, 2026 · NIST NVD
Detected
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via me
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via me
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via me
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via me
Oct 15, 2026 · NIST NVD
Updated
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via me
Affected
- vendor Red Hat Red Hat Enterprise Linux 10version unspecified
- vendor Red Hat Red Hat Enterprise Linux 10.0 Extended Update Supportversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 6version unspecified
- vendor Red Hat Red Hat Enterprise Linux 7version unspecified
- vendor Red Hat Red Hat Enterprise Linux 8version unspecified
- vendor Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 9version unspecified
- vendor Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 9.6 Extended Update Supportversion unspecified
Sources
- CIRCL Vulnerability LookupCVE-2026-79678
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege lev
vulnerability.circl.lu - CVE.orgCVE-2026-79678
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-79678
30-day exploitation probability 0.7%
first.org - NIST NVDCVE-2026-79678
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege lev
nvd.nist.gov