High severity8.1NVD Advisory· Published Sep 7, 2026· Updated Oct 15, 2026
CVE-2026-79678
CVE-2026-79678
Description
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate and read the environment variables of the affected server process and to cause denial of service via memory exhaustion.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
36- osv-coords34 versionspkg:rpm/almalinux/ipa-server-dnspkg:rpm/almalinux/ipa-selinuxpkg:rpm/almalinux/ipa-serverpkg:rpm/almalinux/ipa-server-commonpkg:rpm/almalinux/python3-ipaserverpkg:rpm/almalinux/python3-ipatestspkg:rpm/almalinux/ipa-selinux-lunapkg:rpm/almalinux/bind-dyndb-ldappkg:rpm/almalinux/custodiapkg:rpm/almalinux/ipa-healthcheckpkg:rpm/almalinux/ipa-healthcheck-corepkg:rpm/almalinux/ipa-python-compatpkg:rpm/almalinux/opendnssecpkg:rpm/almalinux/python3-custodiapkg:rpm/almalinux/python3-jwcryptopkg:rpm/almalinux/python3-kdcproxypkg:rpm/almalinux/python3-pyusbpkg:rpm/almalinux/python3-qrcodepkg:rpm/almalinux/python3-qrcode-corepkg:rpm/almalinux/python3-yubicopkg:rpm/almalinux/slapi-nispkg:rpm/almalinux/softhsmpkg:rpm/almalinux/softhsm-develpkg:rpm/almalinux/ipa-client-commonpkg:rpm/almalinux/ipa-client-epnpkg:rpm/almalinux/ipa-client-sambapkg:rpm/almalinux/ipa-commonpkg:rpm/almalinux/ipa-server-encrypted-dnspkg:rpm/almalinux/ipa-client-encrypted-dnspkg:rpm/almalinux/python3-ipalibpkg:rpm/almalinux/ipa-server-trust-adpkg:rpm/almalinux/ipa-clientpkg:rpm/almalinux/ipa-selinux-nfastpkg:rpm/almalinux/python3-ipaclient
< 4.13.4-1.el9_8+ 33 more
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 11.6-6.module_el8.10.0+3980+d78e8e90
- (no CPE)range: < 0.6.0-3.module_el8.6.0+2881+2f24dc92
- (no CPE)range: < 0.12-6.module_el8.10.0+4036+84b152d9
- (no CPE)range: < 0.12-6.module_el8.10.0+4036+84b152d9
- (no CPE)range: < 4.9.13-21.module_el8.10.0+4302+2d2000af.3
- (no CPE)range: < 2.1.7-2.module_el8.10.0+3980+d78e8e90
- (no CPE)range: < 0.6.0-3.module_el8.6.0+2881+2f24dc92
- (no CPE)range: < 0.5.0-2.module_el8.10.0+3844+20e075e5
- (no CPE)range: < 0.4-5.module_el8.10.0+4069+1d9eaa78.2
- (no CPE)range: < 1.0.0-9.1.module_el8.7.0+3349+cfeff52e
- (no CPE)range: < 5.3-1.module_el8.10.0+3942+63b39a46
- (no CPE)range: < 5.3-1.module_el8.10.0+3942+63b39a46
- (no CPE)range: < 1.3.2-9.1.module_el8.7.0+3349+cfeff52e
- (no CPE)range: < 0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1
- (no CPE)range: < 2.6.0-5.module_el8.6.0+2881+2f24dc92
- (no CPE)range: < 2.6.0-5.module_el8.6.0+2881+2f24dc92
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
- (no CPE)range: < 4.13.4-1.el9_8
Patches
Vulnerability mechanics
References
10- access.redhat.com/errata/RHSA-2026:70564nvd
- access.redhat.com/errata/RHSA-2026:72279nvd
- access.redhat.com/errata/RHSA-2026:82935nvd
- access.redhat.com/errata/RHSA-2026:83083nvd
- access.redhat.com/errata/RHSA-2026:83084nvd
- access.redhat.com/errata/RHSA-2026:83085nvd
- access.redhat.com/errata/RHSA-2026:83460nvd
- access.redhat.com/errata/RHSA-2026:83461nvd
- access.redhat.com/security/cve/CVE-2026-79678nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
1- FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator CredentialsThe Hacker News · Sep 8, 2026