A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing… (CVE-2026-104032)

CVE-2026-104032 is a vulnerability in SSSD where missing authorization checks in the autofs responder permit an unprivileged local user to repeatedly request master automount map updates. This triggers global cache invalidation and forces repeated lookups to backend directory providers, causing denial of service through degraded automount availability and elevated resource consumption. The vulnerability affects numerous specific SSSD versions as listed, with no known exploits in the wild and no cloud service implications.

An unprivileged local user can cause denial of service by repeatedly triggering global cache invalidation and forcing repeated backend lookups, which degrades automount availability and increases resource consumption. There is no impact on confidentiality or integrity, only availability is affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict unprivileged local user access where possible to mitigate exploitation risk.