CVE-2026-73197

Name of the Vulnerable Software and Affected Versions FreeIPA (affected versions not specified)

Description A remote, unauthenticated attacker can cause service disruption or a denial of service by sending oversized form POST requests to the '/ipa/migration/migration.py' endpoint. This action forces the migration handler to load attacker-controlled request bodies entirely into memory, resulting in increased memory consumption and slower request processing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.