CVE-2026-73198 Red Hat CVE debrief

Who should care

System administrators and security teams managing FreeIPA services and Red Hat Enterprise Linux environments should prioritize patching and monitoring to mitigate the risk of this vulnerability. Operators of affected systems need to assess their exposure and apply necessary patches or mitigations. Vulnerability management and security teams should review the affected scope and severity to ensure proper remediation.

Technical summary

The CVE-2026-73198 vulnerability in FreeIPA's `/ipa/i18n_messages` endpoint allows remote, unauthenticated attackers to cause a denial of service (DoS) condition by sending arbitrarily large request bodies, leading to memory exhaustion and degraded responsiveness. The vulnerability has a CVSS score of 7.5 and is classified as HIGH severity. Affected versions include FreeIPA up to 4.13.3 and multiple Red Hat Enterprise Linux versions. Technical impact includes memory exhaustion and potential system instability.

Defensive priority

Patch and verify FreeIPA service access controls to limit excessive memory consumption from large requests.

Recommended defensive actions

• Apply vendor patches for FreeIPA and affected Red Hat Enterprise Linux versions.
• Implement rate limiting on requests to the `/ipa/i18n_messages` endpoint.
• Monitor FreeIPA service for unusual memory consumption patterns.
• Verify and restrict access controls for the affected endpoint.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE-2026-73198 vulnerability in FreeIPA allows remote, unauthenticated attackers to cause a denial of service (DoS) condition by sending large requests to the `/ipa/i18n_messages` endpoint, leading to memory exhaustion. Evidence is based on official CVE and NVD sources. Affected versions include FreeIPA up to 4.13.3 and multiple Red Hat Enterprise Linux versions. Defenders should verify system configurations and apply patches.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.