The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ipa-healthcheck-coreUpgrade softhsmUpgrade python3-ipaclientUpgrade python3-custodiaUpgrade bind-dyndb-ldapUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade ipa-python-compatUpgrade ipa-server-encrypted-dnsUpgrade ipa-client-epnUpgrade python3-pyusbUpgrade python3-qrcodeUpgrade ipa-client-sambaUpgrade ipa-client-encrypted-dnsUpgrade ipa-selinux-lunaUpgrade ipa-commonUpgrade python3-ipatestsUpgrade ipa-server-commonUpgrade ipa-server-trust-adUpgrade python3-ipalibUpgrade python3-jwcryptoUpgrade ipa-serverUpgrade python3-yubicoUpgrade ipa-selinuxUpgrade slapi-nisUpgrade custodiaUpgrade ipa-clientUpgrade python3-ipaserverUpgrade ipa-healthcheckUpgrade ipa-selinux-nfastUpgrade opendnssecUpgrade softhsm-devel | Oct 6, 2025 | Oct 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade ipa-serverUpgrade 389-ds-base-libsUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-develUpgrade ipa-commonUpgrade python2-ipaclientUpgrade ipa-clientUpgrade 389-ds-baseUpgrade ipa-python-compatUpgrade ipa-server-commonUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade 389-ds-base-snmpUpgrade ipa-debuginfoUpgrade ipa-server-dns | May 20, 2026 | May 20, 2026 |
| Oracle_linux | — | Upgrade ipa-server-dnsUpgrade ipa-serverUpgrade python3-jwcryptoUpgrade bind-dyndb-ldapUpgrade ipa-clientUpgrade ipa-server-trust-adUpgrade softhsm-develUpgrade ipa-selinux-nfastUpgrade python3-qrcodeUpgrade ipa-server-encrypted-dnsUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade custodiaUpgrade python3-ipaclientUpgrade ipa-server-commonUpgrade python3-kdcproxyUpgrade ipa-client-sambaUpgrade opendnssecUpgrade python3-custodiaUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade python3-pyusbUpgrade softhsmUpgrade python3-ipalibUpgrade ipa-python-compatUpgrade slapi-nisUpgrade python3-ipatestsUpgrade ipa-client-epnUpgrade ipa-selinux-lunaUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade ipa-client-encrypted-dnsUpgrade ipa-selinuxUpgrade python2-ipaclientUpgrade ipa-healthcheck-coreUpgrade python2-ipaserverUpgrade python3-ipaserver | Oct 2, 2025 | Sep 30, 2025 |
| Redhat_linux | — | Upgrade python3-yubicoUpgrade ipa-selinux-nfastUpgrade opendnssec-debugsourceUpgrade slapi-nis-debugsourceNo solution existsUpgrade python2-ipaserverUpgrade ipa-serverUpgrade softhsm-debuginfoUpgrade ipa-clientUpgrade custodiaUpgrade python3-ipalibUpgrade ipa-debugsourceUpgrade ipa-client-debuginfoUpgrade ipa-server-trust-adUpgrade opendnssec-debuginfoUpgrade softhsm-develUpgrade ipa-server-debuginfoUpgrade ipa-client-commonUpgrade python3-pyusbUpgrade slapi-nisUpgrade softhsmUpgrade softhsm-debugsourceUpgrade python3-qrcode-coreUpgrade slapi-nis-debuginfoUpgrade ipa-selinux-lunaUpgrade python3-kdcproxyUpgrade ipa-healthcheck-coreUpgrade python2-ipaclientUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-server-encrypted-dnsUpgrade ipa-client-encrypted-dnsUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade python3-jwcryptoUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade opendnssecUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-custodiaUpgrade python3-ipaclientUpgrade python3-ipatestsUpgrade python3-qrcodeUpgrade ipa-server-commonUpgrade python3-ipaserverUpgrade ipa-client-epnUpgrade ipa-commonUpgrade python2-ipalibUpgrade ipa-debuginfoUpgrade ipa-healthcheck | Oct 1, 2025 | Sep 30, 2025 |
| Rocky_linux | — | Upgrade ipa-serverUpgrade softhsm-debuginfoUpgrade ipa-client-sambaUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-epnUpgrade ipa-client-encrypted-dnsUpgrade ipa-clientUpgrade slapi-nis-debuginfoUpgrade softhsm-debugsourceUpgrade slapi-nis-debugsourceUpgrade opendnssec-debugsourceUpgrade softhsmUpgrade bind-dyndb-ldapUpgrade softhsm-develUpgrade ipa-debuginfoUpgrade opendnssec-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-server-debuginfoUpgrade slapi-nisUpgrade ipa-client-debuginfoUpgrade opendnssecUpgrade ipa-server-encrypted-dnsUpgrade ipa-debugsource | Feb 5, 2026 | Nov 21, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub