NetSight
IP …
critical9.6

CVE-2026-11861

A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active...

Impact

A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.

Affected products

VendorProductAffected versions
FreeipaFreeipa
before 4.13.3
RedhatEnterprise Linux
Versions 7.0, 8.0, 9.0, 10.0
Red HatRed Hat Enterprise Linux 10
All versions
Version patch: 0:4.13.4-1.el10_2
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
All versions
Version patch: 0:4.12.2-15.el10_0.7
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
All versions
Version patch: 0:4.6.8-5.el7_9.25
Red HatRed Hat Enterprise Linux 8
All versions
Versions patch: 8100020261007071200.143e9e98, patch: 8100020261007070536.823393f5
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions
Versions patch: 8040020261027121250.f153676a, patch: 8040020261027121355.5b01ab7e
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
All versions
Versions patch: 8040020261027121250.f153676a, patch: 8040020261027121355.5b01ab7e
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions
Versions patch: 8060020261008134123.c1533a64, patch: 8060020261008133528.ada582f1
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
All versions
Versions patch: 8060020261008134123.c1533a64, patch: 8060020261008133528.ada582f1
Red HatRed Hat Enterprise Linux 9
Version patch: 0:4.13.4-1.el9_8
Red HatRed Hat Enterprise Linux 8.8 Update Services For SAP Solutions
Versions patch: 8080020261007071832.b0a6ceea, patch: 8080020261007080925.e581a9e4
Red HatRed Hat Enterprise Linux 9.2 Update Services For SAP Solutions
Version patch: 0:4.10.1-12.el9_2.7
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Versions patch: 8080020261007080925.e581a9e4, patch: 8080020261007071832.b0a6ceea

Weakness classification

CWE-266

References