CRITICAL 9.6 NVD
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.
References
- https://access.redhat.com/security/cve/CVE-2026-11861
- https://bugzilla.redhat.com/show_bug.cgi?id=2487472
This critical severity vulnerability with a CVSS score of 9.6 was published on 2026-08-20 via NVD.
Risk Timeline
CVE Disclosed2026-08-20 · -1 days ago
Remediation Resources
Official Advisory
access.redhat.com/security/cve/CVE-2026-11861Analysis & PoC
bugzilla.redhat.com/show_bug.cgi?id=2487472
vulnfeed aggregates 11672 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.