PT-2026-56171 · Red Hat · Red Hat Enterprise Linux 10+5

Ian Murphy · Publicado 2026-07-07 · Atualizado 2026-07-07 · CVE-2026-14474

NVD

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A flaw was found in SSSD's LDAP sudo provider. When the ldap sudo search base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo privileges on all SSSD-enrolled hosts.

Correção

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2026-14474

Produtos afetados

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 6

Red Hat Enterprise Linux 7

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Red Hat Openshift Container Platform 4

Referências · 3

• https://bugzilla.redhat.com/show_bug.cgi?id=2496556 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-14474 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2026-14474 · Nota