CVE-2026-19550
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A flaw was found in FreeIPA: the trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission. This allows an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using attacker-supplied server and credentials, resulting in unauthorized modification of trusted-domain and ID-range identity data in the IPA LDAP directory.
Risk Assessment
The risk includes unauthorized modification of identity and trust data, potentially leading to privilege escalation or compromise of trusted domains in the IPA environment.
Recommendation
Apply vendor patches for FreeIPA immediately and restrict access to the trust-fetch-domains command to trusted administrators only.
Original NVD description (English source)
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied server and credentials, resulting in unauthorized, attacker-controlled modification of trusted-domain and ID-range identity data in the IPA LDAP directory.