Improper Authorization Check in FreeIPA Allows Certificate Manipulation
CVE-2026-115221

5.4MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
22 October 2026

What is CVE-2026-115221?

A flaw exists in FreeIPA that permits an authenticated host to improperly access and revoke digital certificates assigned to other users or services. This vulnerability arises from the system's sole reliance on matching the host name with the certificate's subject Common Name (CN), neglecting to verify actual ownership within the directory service. As a result, an enrolled host may disrupt operations by revoking certificates that belong to unrelated entities, potentially leading to service interruptions.

References

https://access.redhat.com/security/cve/CVE-2026-115221
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2559043
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Andrew Rukin (Arenadata) for reporting this issue.
.