Vulnerability intelligence

CVE-2026-13097

Red Hat Red Hat Enterprise Linux 10 CWE-706

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.

CVSS Score

9.1

Critical

EPSS — Exploit Probability

0.4%

Riskier than 35% of all CVEs · checked 2026-10-04

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories