---
id: "CVE-2026-115221"
kind: "vulnerability"
aliases: ["CVE-2026-115221"]
title: "FreeIPA: enrolled hosts can retrieve and revoke other entities' certificates"
severity: "medium"
cvss: 5.4
epss: 0.00145
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["certificates", "freeipa", "identity", "infrastructure", "self-hosted"]
not_affected_if: ["no-enrolled-hosts"]
published_at: "2026-10-22T22:18:06+00:00"
first_seen_at: "2026-10-23T21:57:32+00:00"
updated_at: "2026-10-25T04:14:17+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115221", "first_seen_at": "2026-10-23T21:57:32+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-115221", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# FreeIPA: enrolled hosts can retrieve and revoke other entities' certificates

FreeIPA checks certificate ownership only by matching the host name to the certificate's subject Common Name, without confirming ownership in the directory. An authenticated enrolled host can retrieve and revoke certificates belonging to other users or services, disrupting those services.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-23T21:57:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-115221
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-115221

## From the sources

A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name (CN), without confirming actual ownership in the directory service. Consequently, an enrolled host can disrupt services by revoking certificates belonging to other entities.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_