VDB

RHSA-2026:86623

RHSA-2026:86623 PUBLISHED CVSS 8.100000381469727 HIGH

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's ExternalProcessConstraint mechanism to execute arbitrary commands with attacker-controlled environment variables, achieving code execution as the pkiuser account.

Risk Scores

CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red Hatidm-pki-tools-0:11.6.0-4.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-tools-debuginfo-0:11.6.0-4.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-tools-debuginfo-0:11.6.0-4.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatpki-core-debugsource-0:11.6.0-4.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-base-0:11.6.0-4.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-tools-debuginfo-0:11.6.0-4.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-kra-0:11.6.0-4.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-tools-0:11.6.0-4.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-java-0:11.6.0-4.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-tools-0:11.6.0-4.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-ca-0:11.6.0-4.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatpki-core-debugsource-0:11.6.0-4.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatpki-core-debugsource-0:11.6.0-4.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-acme-0:11.6.0-4.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatpki-core-0:11.6.0-4.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-server-0:11.6.0-4.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-tools-0:11.6.0-4.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatidm-pki-tools-debuginfo-0:11.6.0-4.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatpython3-idm-pki-0:11.6.0-4.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6
Red Hatpki-core-debugsource-0:11.6.0-4.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)0:11.6.0-4.el9_6

Timeline

  • Oct 21, 2026 CVE Published
  • Oct 21, 2026 CVE Updated
  • Oct 21, 2026 Distribution Patch
  • Oct 21, 2026 Distribution Patch
  • Oct 21, 2026 Security Advisory
  • Oct 21, 2026 Security Advisory
  • Oct 21, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›