Denial of Service Vulnerability in FreeIPA by Red Hat
CVE-2026-73198
7.5HIGH
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 20 August 2026
What is CVE-2026-73198?
A vulnerability has been identified in FreeIPA that can be exploited by a remote, unauthenticated attacker. By sending an excessively large request to the /ipa/i18n_messages endpoint, the attacker can overload the system's memory capacity. This situation results in degraded responsiveness of the service and can ultimately lead to a Denial of Service condition, severely impacting the availability of the FreeIPA service.
Affected Version(s)
Red Hat Enterprise Linux 10 0:4.13.4-1.el10_2
Red Hat Enterprise Linux 10.0 Extended Update Support 0:4.12.2-15.el10_0.7
Red Hat Enterprise Linux 8 8100020261007071200.143e9e98
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
This issue was discovered by Found by AISLE in partnership with Red Hat.