CVE-2026-73197

Description

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.

References

• Advisories
• More

Details

Source: Mitre, NVD

Named Vulnerability: GHSA-m6vw-rcwj-pg9q

Risk Information

CVSS v2

CVSS v3

EPSS