PT-2026-53831 · Sssd · Sssd

Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-12610

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sssd (affected versions not specified)

Description A use-after-free flaw exists in the SSSD PAM responder during YubiKey authentication, occurring when a memory pointer is incorrectly handled. A local attacker can trigger a denial of service that disrupts authentication by manipulating smartcard or YubiKey contents. This issue also presents a potential for privilege escalation, although it is difficult to exploit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-825

Related Identifiers

CVE-2026-12610

Affected Products

Sssd

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-12610 · Security Note
• https://github.com/SSSD/sssd/issues/8796 · Note
• https://twitter.com/VulmonFeeds/status/2071914980715164064 · Twitter Post
• https://access.redhat.com/security/cve/CVE-2026-12610 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2490288 · Note