A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade freeipa-server | Sep 18, 2026 | Sep 11, 2026 |
| Redhat_linux | — | Upgrade ipa-server-dnsUpgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-server-encrypted-dnsUpgrade python3-ipaclientUpgrade python3-ipalibUpgrade ipa-client-commonUpgrade ipa-serverUpgrade ipa-server-debuginfoUpgrade ipa-clientUpgrade ipa-selinux-nfastUpgrade ipa-client-debuginfoUpgrade ipa-server-commonUpgrade ipa-client-epnUpgrade python3-ipaserverUpgrade ipa-selinux-lunaUpgrade ipa-commonUpgrade ipa-client-encrypted-dnsUpgrade ipa-client-sambaUpgrade ipa-selinuxNo solution existsUpgrade ipa-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-ipatests | Aug 24, 2026 | Aug 20, 2026 |
| Rocky_linux | — | Upgrade ipa-client-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-server-encrypted-dnsUpgrade ipa-debugsourceUpgrade ipa-server-debuginfoUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-sambaUpgrade ipa-client-epnUpgrade ipa-client-encrypted-dnsUpgrade ipa-client | Sep 28, 2026 | Sep 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub