High severity7.5NVD Advisory· Published Aug 20, 2026· Updated Sep 28, 2026
CVE-2026-73197
CVE-2026-73197
Description
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
28- osv-coords26 versionspkg:apk/chainguard/freeipapkg:apk/chainguard/freeipa-docpkg:apk/chainguard/py3.13-ipaclientpkg:apk/chainguard/py3.13-ipalibpkg:apk/chainguard/py3.13-ipaplatformpkg:apk/chainguard/py3.13-ipapythonpkg:apk/chainguard/py3.13-ipaserverpkg:apk/chainguard/py3.13-ipatestspkg:rpm/almalinux/ipa-clientpkg:rpm/almalinux/ipa-client-commonpkg:rpm/almalinux/ipa-client-encrypted-dnspkg:rpm/almalinux/ipa-client-epnpkg:rpm/almalinux/ipa-client-sambapkg:rpm/almalinux/ipa-commonpkg:rpm/almalinux/ipa-selinuxpkg:rpm/almalinux/ipa-selinux-lunapkg:rpm/almalinux/ipa-selinux-nfastpkg:rpm/almalinux/ipa-serverpkg:rpm/almalinux/ipa-server-commonpkg:rpm/almalinux/ipa-server-dnspkg:rpm/almalinux/ipa-server-encrypted-dnspkg:rpm/almalinux/ipa-server-trust-adpkg:rpm/almalinux/python3-ipaclientpkg:rpm/almalinux/python3-ipalibpkg:rpm/almalinux/python3-ipaserverpkg:rpm/almalinux/python3-ipatests
< 4.13.3-r0+ 25 more
- (no CPE)range: < 4.13.3-r0
- (no CPE)range: < 4.13.3-r0
- (no CPE)range: < 4.13.3-r0
- (no CPE)range: < 4.13.3-r0
- (no CPE)range: < 4.13.3-r0
- (no CPE)range: < 4.13.3-r0
- (no CPE)range: < 4.13.3-r0
- (no CPE)range: < 4.13.3-r0
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
Patches
Vulnerability mechanics
References
4- access.redhat.com/security/cve/CVE-2026-73197nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- access.redhat.com/errata/RHSA-2026:70564nvd
- access.redhat.com/errata/RHSA-2026:72279nvd
News mentions
0No linked articles in our index yet.