CVE-2026-19550

CVE-2026-19550 affects FreeIPA. The flaw is in the trust-fetch-domains command, which is gated by a read-only permission on the trust object rather than a trust-administration permission. This allows an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh ...