Live › vulnerability › CVE-2026-115221
Go to dashboardFreeIPA checks certificate ownership only by matching the host name to the certificate's subject Common Name, without confirming ownership in the directory. An authenticated enrolled host can retrieve and revoke certificates belonging to other users or services, disrupting those services.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Deployments of FreeIPA where enrolled hosts can authenticate and certificates are issued to users or services. Installations without enrolled hosts that can reach the certificate API are less exposed. The sources do not name affected versions.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name (CN), without confirming actual ownership in the directory service. Consequently, an enrolled host can disrupt services by revoking certificates belonging to other entities.
This page as .md · .json · in your agent: get_signal("CVE-2026-115221")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.