Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat IPA may let attackers gain unauthorized access

published 21 days ago

Summary

The IPA server and its client components for Red Hat can be tricked into granting access to users who should not have it. This could let an attacker view or change sensitive configuration data. Apply the latest security update from Red Hat as soon as possible to close the gap.

What to do

Update redhat ipa to version 0:4.13.4-1.el10_2.
Update redhat ipa-client to version 0:4.13.4-1.el10_2.
Update redhat ipa-client-common to version 0:4.13.4-1.el10_2.
Update redhat ipa-client-debuginfo to version 0:4.13.4-1.el10_2.
Update redhat ipa-client-encrypted-dns to version 0:4.13.4-1.el10_2.
Update redhat ipa-client-epn to version 0:4.13.4-1.el10_2.
Update redhat ipa-client-samba to version 0:4.13.4-1.el10_2.
Update redhat ipa-common to version 0:4.13.4-1.el10_2.
Update redhat ipa-debuginfo to version 0:4.13.4-1.el10_2.
Update redhat ipa-debugsource to version 0:4.13.4-1.el10_2.
Update redhat ipa-selinux to version 0:4.13.4-1.el10_2.
Update redhat ipa-selinux-luna to version 0:4.13.4-1.el10_2.
Update redhat ipa-selinux-nfast to version 0:4.13.4-1.el10_2.
Update redhat ipa-server to version 0:4.13.4-1.el10_2.
Update redhat ipa-server-common to version 0:4.13.4-1.el10_2.
Update redhat ipa-server-debuginfo to version 0:4.13.4-1.el10_2.
Update redhat ipa-server-dns to version 0:4.13.4-1.el10_2.
Update redhat ipa-server-encrypted-dns to version 0:4.13.4-1.el10_2.
Update redhat ipa-server-trust-ad to version 0:4.13.4-1.el10_2.
Update redhat ipa-server-trust-ad-debuginfo to version 0:4.13.4-1.el10_2.
Update redhat python3-ipaclient to version 0:4.13.4-1.el10_2.
Update redhat python3-ipalib to version 0:4.13.4-1.el10_2.
Update redhat python3-ipaserver to version 0:4.13.4-1.el10_2.
Update redhat python3-ipatests to version 0:4.13.4-1.el10_2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:10.2	redhat	ipa	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-client	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-client-common	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-client-debuginfo	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-client-encrypted-dns	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-client-epn	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-client-samba	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-common	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-debuginfo	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-debugsource	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-selinux	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-selinux-luna	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-selinux-nfast	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-server	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-server-common	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-server-debuginfo	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-server-dns	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-server-encrypted-dns	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-server-trust-ad	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	ipa-server-trust-ad-debuginfo	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	python3-ipaclient	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	python3-ipalib	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	python3-ipaserver	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2
Red Hat:enterprise_linux:10.2	redhat	python3-ipatests	< 0:4.13.4-1.el10_2 Fix: upgrade to 0:4.13.4-1.el10_2

Original advisory text

Red Hat Security Advisory: ipa security, bug fix, and enhancement update

References

https://access.redhat.com/errata/RHSA-2026:72279 Vendor Advisory
https://access.redhat.com/security/updates/classification/#critical Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2472960 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2474697 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2487472 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2508181 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2514019 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2515974 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2519522 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2523356 Third Party Advisory
https://issues.redhat.com/browse/RHEL-173375 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72279.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-11861 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-11861 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-11861 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-13097 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-13097 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-13097 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-18147 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-18147 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-18147 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-19550 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-19550 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-19550 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-73197 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-73197 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-73197 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-73198 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-73198 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-73198 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-76578 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-76578 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-76578 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-79678 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-79678 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-79678 Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Timeline

Published28 Sep 2026

Updated28 Sep 2026

First seen28 Sep 2026

Sources

RHSA-2026:72279 · OSV

Track software like this

Free during beta