VDB

RHSA-2026:75573

RHSA-2026:75573 PUBLISHED CVSS 7.199999809265137 HIGH

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's ExternalProcessConstraint mechanism to execute arbitrary commands with attacker-controlled environment variables, achieving code execution as the pkiuser account.

Risk Scores

CVSS 3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red Hatidm-pki-tools-0:10.15.1-3.module+el8.10.0+24994+a709cca8.s390x (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8
Red Hatresteasy-javadoc-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:3.0.26-7.module+el8.10.0+21132+79720f4e
Red Hatidm-pki-symkey-0:10.15.1-3.module+el8.10.0+24994+a709cca8.aarch64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8
Red Hatidm-pki-base-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8
Red Hatidm-pki-server-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8
Red Hatpki-core-debuginfo-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8
Red Hatjss-debugsource-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:4.11.0-1.module+el8.10.0+21280+cce842b8
Red Hatjss-debugsource-0:4.11.0-1.module+el8.10.0+21280+cce842b8.ppc64le (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:4.11.0-1.module+el8.10.0+21280+cce842b8
Red Hatidm-ldapjdk-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:4.24.0-1.module+el8.10.0+21280+cce842b8
Red Hatpki-core-debuginfo-0:10.15.1-3.module+el8.10.0+24994+a709cca8.s390x (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8
Red Hatidm-pki-tools-0:10.15.1-3.module+el8.10.0+24994+a709cca8.ppc64le (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8
Red Hatidm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:4.11.0-1.module+el8.10.0+21280+cce842b8
Red Hatidm-jss-debuginfo-0:4.11.0-1.module+el8.10.0+21280+cce842b8.aarch64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:4.11.0-1.module+el8.10.0+21280+cce842b8
Red Hatidm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.ppc64le (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:4.11.0-1.module+el8.10.0+21280+cce842b8
Red Hatpython3-idm-pki-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8
Red Hatjss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.src (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:4.11.0-1.module+el8.10.0+21280+cce842b8
Red Hatpki-core-debugsource-0:10.15.1-3.module+el8.10.0+24994+a709cca8.s390x (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8
Red Hatpki-core-debugsource-0:10.15.1-3.module+el8.10.0+24994+a709cca8.ppc64le (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8
Red Hatidm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.ppc64le (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:4.11.0-1.module+el8.10.0+21280+cce842b8
Red Hatpki-core-debugsource-0:10.15.1-3.module+el8.10.0+24994+a709cca8.aarch64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)0:10.15.1-3.module+el8.10.0+24994+a709cca8

…and 37 more

Timeline

  • Oct 5, 2026 CVE Published
  • Nov 2, 2026 CVE Updated
  • Nov 2, 2026 Distribution Patch
  • Nov 2, 2026 Distribution Patch
  • Nov 2, 2026 Security Advisory
  • Nov 2, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›