Authorization Flaw in 389 Directory Server Allowing Unauthorized Operations
CVE-2026-19404

6.5MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Directory Server 11
Red Hat Directory Server 12
Red Hat Directory Server 13
Red Hat Enterprise Linux 10
Vendor
CVE Published:
10 August 2026

What is CVE-2026-19404?

An authorization flaw exists in 389 Directory Server, allowing unauthenticated remote attackers to execute CleanAllRUV and Abort CleanAllRUV operations when anonymous access is permitted. This default setting could enable unauthorized changes to replication metadata, including removal of replica IDs and purging of changelog records. Such actions can disrupt replication processes, leading to inconsistent or unavailable directories, thereby severely impacting system integrity and availability.

References

https://access.redhat.com/security/cve/CVE-2026-19404
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2513036
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Andrew Rukin (Arenadata) for reporting this issue.
.