CVE Feed

    Dashboard / CVE / CVE-2026-104048

    CVE-2026-104048

    A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account can bypass access policies and gain unauthorized access to protected services or hosts.

    Published:Oct 6, 2026
    Last Modified:Oct 9, 2026
    EPS:Oct 6, 2026
    EPSS Score:0.00276
    CVSS Score:6.8

    Affected Products

    Vendor
    Fedoraproject
    Product
    Sssd
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Openshift
    Vendor
    Redhat
    Product
    Openshift Container Platform
    Vendor
    Sssd
    Product
    Sssd

    Exploits

    https://bugzilla.redhat.com/show_bug.cgi?id=2478613https://bugzilla.redhat.com/show_bug.cgi?id=2478613

    Common Weakness Enumeration

    CWE-1025 Comparison Using Wrong Factors

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-104045 (CVSS 4.7) — A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in…
    CVE-2026-88252 (CVSS 4.7) — A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service…
    CVE-2026-104046 (CVSS 6.2) — A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is ena…
    CVE-2026-104047 (CVSS 5.3) — A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized …
    CVE-2026-104040 (CVSS 4.4) — A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing s…
    CVE-2026-104032 (CVSS 5.5) — A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates throu…
    CVE-2026-104031 (CVSS 5.5) — A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated du…
    CVE-2026-104030 (CVSS 5.5) — A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitt…
    CVE-2026-104029 (CVSS 3.3) — A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted reque…
    CVE-2026-90462 (CVSS 5.4) — A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-104048 — Fedoraproject, Redhat + (Medium 6.8) | CVE-DB