CVE-2026-14474

Published: Jul 7, 2026Modified: Jul 21, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo privileges on all SSSD-enrolled hosts.

Related CWEs

CWE-1188

Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (4)

https://access.redhat.com/errata/RHSA-2026:41937

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2026:42122

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2026-14474

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2496556

Source: secalert@redhat.com

Timeline

No history available yet.