CVE-2026-13097

Name of the Vulnerable Software and Affected Versions FreeIPA (affected versions not specified)

Description A privilege escalation flaw exists in FreeIPA due to a failure in the 389-ds directory server to properly enforce uniqueness constraints on Kerberos principal name attributes. The server does not account for equivalent representations of the same principal name, which allows a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This flaw can enable the unauthorized acquisition of Kerberos service tickets for sensitive services, potentially leading to a full domain compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.