freeipa vulnerabilities

CVEs whose affected-version data names the freeipa package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-13097High· 8.7

1mo ago

A privilege escalation flaw was found in FreeIPA

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name…

▾ Twilightfreeipa · freeipaEPSS 0.27%via NVD

CVE-2019-14867High· 8.8

4y ago

Code injection in FreeIPA

▾ Twilightipa · ipaEPSS 7.4%via OSV