CVE-2026-76561

Name of the Vulnerable Software and Affected Versions Dogtag PKI (affected versions not specified)

Description An issue exists in the certificate profile import functionality of Dogtag PKI, specifically within the certificate authority component used by FreeIPA. The system fails to fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit the ExternalProcessConstraint mechanism to execute arbitrary commands using attacker-controlled environment variables, resulting in code execution under the pkiuser account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.