high8.1
CVE-2026-79678
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corr…
Impact
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | All versions Version patch: 0:4.13.4-1.el10_2 |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | All versions Version patch: 0:4.12.2-15.el10_0.7 |
| Red Hat | Red Hat Enterprise Linux 8 | All versions Versions patch: 8100020261007071200.143e9e98, patch: 8100020261007070536.823393f5 |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | All versions Versions patch: 8040020261027121355.5b01ab7e, patch: 8040020261027121250.f153676a |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | All versions Versions patch: 8040020261027121355.5b01ab7e, patch: 8040020261027121250.f153676a |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | All versions Versions patch: 8060020261008133528.ada582f1, patch: 8060020261008134123.c1533a64 |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | All versions Versions patch: 8060020261008133528.ada582f1, patch: 8060020261008134123.c1533a64 |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions | Versions patch: 8080020261007071832.b0a6ceea, patch: 8080020261007080925.e581a9e4 |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services For SAP Solutions | Version patch: 0:4.11.0-15.el9_4.9 |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | Versions patch: 8080020261007080925.e581a9e4, patch: 8080020261007071832.b0a6ceea |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions | Version patch: 0:4.10.1-12.el9_2.7 |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | Version patch: 0:4.12.2-14.el9_6.8 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://access.redhat.com/errata/RHSA-2026:70564
- https://access.redhat.com/errata/RHSA-2026:72279
- https://access.redhat.com/errata/RHSA-2026:82935
- https://access.redhat.com/errata/RHSA-2026:83083
- https://access.redhat.com/errata/RHSA-2026:83084
- https://access.redhat.com/errata/RHSA-2026:83085
- https://access.redhat.com/errata/RHSA-2026:83460
- https://access.redhat.com/errata/RHSA-2026:83461
- https://access.redhat.com/errata/RHSA-2026:89836
- https://access.redhat.com/security/cve/CVE-2026-79678
- https://bugzilla.redhat.com/show_bug.cgi?id=2523356
- https://access.redhat.com/errata/RHSA-2026:93452
- https://github.com/advisories/GHSA-2rwh-2wx9-4qwh
- https://nvd.nist.gov/vuln/detail/CVE-2026-79678