Description
A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause unauthorized information disclosure from the directory.
Published: 2026-10-06
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Patch
AI Analysis

Impact

A flaw in the System Security Services Daemon allows a local user, when Microsoft Entra ID integration is enabled, to submit a crafted lookup request that is not properly sanitized before being incorporated into directory query filters. This permits the user to manipulate the query logic and retrieve directory information that should not be disclosed. The vulnerability is classified as moderate severity with a CVSS score of 5.3 and corresponds to CWE-140.

Affected Systems

Affected systems include Red Hat Enterprise Linux releases 6 through 10 and Red Hat OpenShift Container Platform version 4. All of these environments use SSSD, and the issue applies whenever Microsoft Entra ID integration is configured, regardless of the specific patch level supplied by Red Hat.

Risk and Exploitability

The risk is confined to a local user who can invoke SSSD lookups. No official workaround has been published; Red Hat states that available mitigation options do not meet the criteria for ease of use, widespread applicability, or stability. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating a low likelihood of widespread exploitation. However, the potential for sensitive directory data to be revealed warrants treating the vulnerability as a moderate‑severity risk that should be mitigated when a vendor fix becomes available.

Generated by OpenCVE AI on October 6, 2026 at 21:31 UTC.

Remediation

Vendor Workaround

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

OpenCVE Recommended Actions

  • Apply the Red Hat vendor patch or upgrade to a newer SSSD release that addresses the query‑sanitization issue as soon as it becomes available.
  • If disabling Microsoft Entra ID integration is feasible in your environment, do so as an interim measure; note that this is not formally supported as a workaround but may reduce exposure until a fix is released.
  • Limit local user privileges that can trigger SSSD lookup requests and regularly monitor SSSD logs for suspicious query patterns.

Generated by OpenCVE AI on October 6, 2026 at 21:31 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 31 Oct 2026 10:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:5

Fri, 09 Oct 2026 13:15:00 +0000

Type Values Removed Values Added
First Time appeared Fedoraproject
Fedoraproject sssd
CPEs cpe:2.3:a:fedoraproject:sssd:2.12.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Vendors & Products Fedoraproject
Fedoraproject sssd

Fri, 09 Oct 2026 09:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat openshift Container Platform
Sssd
Sssd sssd
Vendors & Products Redhat openshift Container Platform
Sssd
Sssd sssd

Wed, 07 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Tue, 06 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 06 Oct 2026 19:45:00 +0000

Type Values Removed Values Added
Description A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause unauthorized information disclosure from the directory.
Title Sssd: sssd: information disclosure via query injection in entra id lookups
First Time appeared Redhat
Redhat enterprise Linux
Redhat openshift
Weaknesses CWE-140
CPEs cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat openshift
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'}

Subscriptions

Fedoraproject Sssd
Redhat Enterprise Linux Openshift Openshift Container Platform
Sssd Sssd
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-10-31T10:02:01.403Z

Reserved: 2026-10-01T17:26:17.420Z

Link: CVE-2026-104047

cve-icon Vulnrichment

Updated: 2026-10-06T19:46:12.352Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-06T20:17:14.823

Modified: 2026-10-31T10:16:34.373

Link: CVE-2026-104047

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-10-06T15:36:05Z

Links: CVE-2026-104047 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-09T08:32:50Z

Weaknesses
  • CWE-140

    Improper Neutralization of Delimiters