Vulnerability in Red Hat Enterprise Linux 10
CVE-2026-13097
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking)
Frequently asked questions
- What is CVE-2026-13097?
- CVE-2026-13097 is a critical-severity vulnerability in Red Hat Enterprise Linux 10, classified under Use of Incorrectly-Resolved Name or Reference. CVSS score: 9.1/10. Published 2026-08-20.
- How severe is CVE-2026-13097?
- Critical severity. CVSS v3 base score is 9.1 out of 10.