Red Hat Security Advisory: sssd security update
Two security vulnerabilities were identified in the System Security Services Daemon (SSSD) used by Red Hat Enterprise Linux 10. The first vulnerability (CVE-2026-14474) involves the sudo LDAP provider searching the entire directory tree for sudoRole objects by default, which can enable privilege escalation. The second vulnerability (CVE-2026-14476) involves a path traversal in the GPO cache via an unsanitized gPCFileSysPath, allowing Kerberos authentication bypass. Red Hat has issued a security update addressing these issues for Red Hat Enterprise Linux 10 and related variants.
AI Analysis
Technical Summary
The System Security Services Daemon (SSSD) in Red Hat Enterprise Linux 10 has two notable vulnerabilities. CVE-2026-14474 concerns the sudo LDAP provider's default behavior of searching the entire directory tree for sudoRole objects, which can lead to privilege escalation. CVE-2026-14476 involves a path traversal vulnerability in the Group Policy Object (GPO) cache due to an unsanitized gPCFileSysPath, enabling bypass of Kerberos authentication. Red Hat has released security updates to fix these vulnerabilities as detailed in advisory RHSA-2026:41937.
Potential Impact
Successful exploitation of CVE-2026-14474 could allow an attacker to escalate privileges by abusing the sudo LDAP provider's directory search behavior. Exploitation of CVE-2026-14476 could allow an attacker to bypass Kerberos authentication via path traversal in the GPO cache. Both vulnerabilities affect authentication and authorization mechanisms, potentially compromising system security.
Mitigation Recommendations
Red Hat has released security updates for Red Hat Enterprise Linux 10 and related products to address these vulnerabilities. Users should apply the updates as described in Red Hat advisory RHSA-2026:41937 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.
Red Hat Security Advisory: sssd security update
Description
Two security vulnerabilities were identified in the System Security Services Daemon (SSSD) used by Red Hat Enterprise Linux 10. The first vulnerability (CVE-2026-14474) involves the sudo LDAP provider searching the entire directory tree for sudoRole objects by default, which can enable privilege escalation. The second vulnerability (CVE-2026-14476) involves a path traversal in the GPO cache via an unsanitized gPCFileSysPath, allowing Kerberos authentication bypass. Red Hat has issued a security update addressing these issues for Red Hat Enterprise Linux 10 and related variants.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The System Security Services Daemon (SSSD) in Red Hat Enterprise Linux 10 has two notable vulnerabilities. CVE-2026-14474 concerns the sudo LDAP provider's default behavior of searching the entire directory tree for sudoRole objects, which can lead to privilege escalation. CVE-2026-14476 involves a path traversal vulnerability in the Group Policy Object (GPO) cache due to an unsanitized gPCFileSysPath, enabling bypass of Kerberos authentication. Red Hat has released security updates to fix these vulnerabilities as detailed in advisory RHSA-2026:41937.
Potential Impact
Successful exploitation of CVE-2026-14474 could allow an attacker to escalate privileges by abusing the sudo LDAP provider's directory search behavior. Exploitation of CVE-2026-14476 could allow an attacker to bypass Kerberos authentication via path traversal in the GPO cache. Both vulnerabilities affect authentication and authorization mechanisms, potentially compromising system security.
Mitigation Recommendations
Red Hat has released security updates for Red Hat Enterprise Linux 10 and related products to address these vulnerabilities. Users should apply the updates as described in Red Hat advisory RHSA-2026:41937 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:41937
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-14476"]
- Cvss Version
- null
Threat ID: 6a5e7a022a4a8d59899d8876
Added to database: 07/20/2026, 19:41:54 UTC
Last enriched: 07/20/2026, 20:17:19 UTC
Last updated: 07/21/2026, 08:57:34 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.