The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcryptoUpgrade ipa-server-commonUpgrade ipa-serverUpgrade softhsm-develUpgrade python3-ipalibUpgrade python3-ipatestsUpgrade ipa-server-trust-adUpgrade ipa-selinux-nfastUpgrade custodiaUpgrade ipa-selinuxUpgrade opendnssecUpgrade ipa-selinux-lunaUpgrade ipa-healthcheckUpgrade slapi-nisUpgrade python3-ipaserverUpgrade ipa-commonUpgrade ipa-clientUpgrade python3-yubicoUpgrade ipa-client-encrypted-dnsUpgrade python3-qrcodeUpgrade ipa-python-compatUpgrade ipa-healthcheck-coreUpgrade ipa-client-sambaUpgrade python3-ipaclientUpgrade softhsmUpgrade python3-kdcproxyUpgrade python3-custodiaUpgrade bind-dyndb-ldapUpgrade python3-qrcode-coreUpgrade python3-pyusbUpgrade ipa-client-commonUpgrade ipa-server-encrypted-dnsUpgrade ipa-client-epnUpgrade ipa-server-dns | Oct 6, 2025 | Oct 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-commonUpgrade ipa-python-compatUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade 389-ds-base-snmpUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-serverUpgrade 389-ds-base-debuginfoUpgrade 389-ds-base-develUpgrade ipa-clientUpgrade ipa-commonUpgrade 389-ds-base-libsUpgrade 389-ds-baseUpgrade python2-ipaserver | May 20, 2026 | May 20, 2026 |
| Oracle_linux | — | Upgrade python3-qrcodeUpgrade python3-qrcode-coreUpgrade ipa-client-commonUpgrade softhsmUpgrade python3-ipalibUpgrade python3-jwcryptoUpgrade python3-kdcproxyUpgrade ipa-serverUpgrade ipa-server-encrypted-dnsUpgrade python3-yubicoUpgrade ipa-server-dnsUpgrade ipa-selinux-nfastUpgrade ipa-client-sambaUpgrade custodiaUpgrade softhsm-develUpgrade bind-dyndb-ldapUpgrade python3-pyusbUpgrade ipa-python-compatUpgrade python3-ipaclientUpgrade ipa-server-trust-adUpgrade opendnssecUpgrade ipa-clientUpgrade ipa-server-commonUpgrade python3-custodiaUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade slapi-nisUpgrade ipa-client-epnUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade ipa-selinux-lunaUpgrade python2-ipaserverUpgrade python3-ipaserverUpgrade ipa-healthcheck-coreUpgrade python3-ipatestsUpgrade ipa-selinuxUpgrade ipa-client-encrypted-dns | Oct 2, 2025 | Sep 30, 2025 |
| Redhat_linux | — | Upgrade slapi-nisUpgrade python2-ipaclientUpgrade ipa-healthcheck-coreUpgrade custodiaUpgrade ipa-server-debuginfoUpgrade ipa-server-trust-adUpgrade softhsm-debugsourceUpgrade ipa-selinux-lunaUpgrade python3-pyusbUpgrade ipa-selinux-nfastUpgrade slapi-nis-debuginfoUpgrade python3-kdcproxyUpgrade softhsmUpgrade ipa-client-commonUpgrade ipa-client-debuginfoUpgrade python3-ipalibUpgrade python2-ipaserverUpgrade softhsm-develNo solution existsUpgrade ipa-debugsourceUpgrade ipa-serverUpgrade opendnssec-debuginfoUpgrade python3-qrcode-coreUpgrade python3-yubicoUpgrade slapi-nis-debugsourceUpgrade ipa-clientUpgrade softhsm-debuginfoUpgrade opendnssec-debugsourceUpgrade python3-ipaclientUpgrade python3-qrcodeUpgrade python3-ipatestsUpgrade python3-jwcryptoUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade ipa-server-commonUpgrade bind-dyndb-ldapUpgrade python2-ipalibUpgrade ipa-healthcheckUpgrade ipa-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade opendnssecUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-encrypted-dnsUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-encrypted-dnsUpgrade ipa-commonUpgrade python3-custodiaUpgrade python3-ipaserver | Oct 1, 2025 | Sep 30, 2025 |
| Rocky_linux | — | Upgrade slapi-nisUpgrade ipa-client-debuginfoUpgrade softhsmUpgrade softhsm-debugsourceUpgrade opendnssec-debugsourceUpgrade bind-dyndb-ldapUpgrade slapi-nis-debugsourceUpgrade opendnssec-debuginfoUpgrade ipa-server-debuginfoUpgrade opendnssecUpgrade ipa-server-encrypted-dnsUpgrade softhsm-develUpgrade ipa-debugsourceUpgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-client-encrypted-dnsUpgrade slapi-nis-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debugsourceUpgrade softhsm-debuginfoUpgrade ipa-serverUpgrade ipa-clientUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-epn | Feb 5, 2026 | Nov 21, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub