CVE-2026-19550

Name of the Vulnerable Software and Affected Versions FreeIPA (affected versions not specified)

Description An issue exists where the trust-fetch-domains command is restricted by a read-only permission on the trust object instead of a trust-administration permission. This allows an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh by providing an attacker-supplied server and credentials. This can lead to unauthorized modification of trusted-domain and ID-range identity data within the IPA LDAP directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.