PT-2026-56172 · Sssd · Sssd

Ian Murphy · Published 2026-07-07 · Updated 2026-07-07 · CVE-2026-14476

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description A path traversal flaw exists in the AD GPO provider of SSSD. The ad gpo extract smb components() function fails to sanitize .. sequences within the gPCFileSysPath LDAP attribute. This allows an attacker with AD GPO management access to write files outside the GPO cache directory with root privileges. In default RHEL configurations where SELinux is enforcing, this flaw can be exploited to inject Kerberos configuration, potentially resulting in an authentication bypass.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2026-14476

Affected Products

Sssd

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-14476 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2496581 · Note
• https://twitter.com/CVEnew/status/2074459527164911668 · Twitter Post
• https://access.redhat.com/security/cve/CVE-2026-14476 · Note
• https://twitter.com/infoflowcloud/status/2074460078007005565 · Twitter Post