CVE-2026-73197
published 2026-08-20CVE-2026-73197: A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the…
PriorityP347high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.54%
44.6th percentile
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| freeipa | freeipa | < 4.13.3 | 4.13.3 |
| red_hat | ipa | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read
vendor_redhat·2026-08-20·CVSS 7.5
CVE-2026-73197 [HIGH] CWE-770 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read
ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
Mitigation: If the `/ipa/migration` endpoint is not required, it can be disabled by commenting out or removing the `Alias /ipa/migration` and its corresponding `` block in the Apache configuration file (e.g., `/etc/httpd/conf.d/ipa.conf`).
Alternatively, to limit the size of request bodies processed by
GHSA
A flaw was found in FreeIPA.
ghsa_unreviewed·2026-08-20
CVE-2026-73197 [HIGH] CWE-770 A flaw was found in FreeIPA.
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-73197 freeipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [fedora-all]
bugzilla·2026-08-20·CVSS 7.5
CVE-2026-73197 [HIGH] CVE-2026-73197 freeipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [fedora-all]
CVE-2026-73197 freeipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
AI_ONLY_REPORT
package: ipa-4.13.1-3.el10
Summary: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded
Request Body Read: oversized unauthenticated form POST requests can force
the migration handler to read attacker-controlled request bodies fully into
memory, causing worker memory pressure and service degradation.
Requirements to exploit: Network access to `/ipa/migration/migration.py`
and the ability to send large POST req
Bugzilla
CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read
bugzilla·2026-05-11·CVSS 7.5
CVE-2026-73197 [HIGH] CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read
CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read
AI_ONLY_REPORT
package: ipa-4.13.1-3.el10
Summary: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded
Request Body Read: oversized unauthenticated form POST requests can force
the migration handler to read attacker-controlled request bodies fully into
memory, causing worker memory pressure and service degradation.
Requirements to exploit: Network access to `/ipa/migration/migration.py`
and the ability to send large POST requests with
`application/x-www-form-urlencoded`; no authentication is required.
Deployments that already enforce strict front-end request-body limits or do
not expose this endpoint materially reduce exploitability.
Component affected: `ipa-4.1
https://access.redhat.com/errata/RHSA-2026:70564https://access.redhat.com/errata/RHSA-2026:72279https://access.redhat.com/errata/RHSA-2026:82935https://access.redhat.com/errata/RHSA-2026:83083https://access.redhat.com/errata/RHSA-2026:83084https://access.redhat.com/errata/RHSA-2026:83085https://access.redhat.com/errata/RHSA-2026:83460https://access.redhat.com/errata/RHSA-2026:83461https://access.redhat.com/security/cve/CVE-2026-73197https://bugzilla.redhat.com/show_bug.cgi?id=2474697
2026-08-20
Published