CVE-2026-11861

Name of the Vulnerable Software and Affected Versions FreeIPA (affected versions not specified)

Description A flaw exists when a trust relationship is configured between FreeIPA and Active Directory. Authenticated Active Directory users can bypass authentication for FreeIPA services, such as the portal, SMB server, and LDAP directory, by impersonating a client name in the Ticket Granting Service (TGS). This occurs because FreeIPA services do not verify Privilege Attribute Certificate (PAC) certificates, which are data structures used in Kerberos to convey authorization information. This issue could allow an attacker to escalate privileges within the FreeIPA domain.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.