Skip to content
Threat Feed
Subscribe

Vendor

FreeIPA

1 brief RSS
high advisory

Privilege Escalation in FreeIPA via Kerberos Principal Name Collision

CVE-2026-13097 is a privilege escalation vulnerability in FreeIPA where the 389-ds directory server fails to enforce uniqueness constraints on Kerberos principal names, allowing attackers with LDAP write access to impersonate privileged service principals.

FreeIPA privilege-escalation identity-management kerberos
1t 1c