CVE-2026-14474— Red Hat sssd 配置错误漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

Red Hat Red Hat Enterprise Linux 10

利用判断

尚无明确在野利用证据，仍需结合暴露面评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Red Hat sssd是美国Red Hat公司的一款数据库系统软件。 Red Hat sssd存在配置错误漏洞，该漏洞源于SSSD的LDAP sudo provider中未明确配置ldap_sudo_search_base选项时，SSSD会搜索整个LDAP目录树以查找sudoRole对象，导致已通过身份验证的攻击者对任一子树具有写入权限时，可注入sudoRole对象，授予所有SSSD注册主机上的根级别sudo权限。以下版本受到影响：Red Hat Enterprise Linux 10版本、Red Ha

CVE-2026-14474 影响 Red Hat Red Hat Enterprise Linux 10。尚无明确在野利用证据，仍需结合暴露面评估。Red Hat sssd是美国Red Hat公司的一款数据库系统软件。 Red Hat sssd存在配置错误漏洞，该漏洞源于SSSD的LDAP sudo provider中未明确配置ldap_sudo_search_base选项时，SSSD会搜索整个LDAP目录树以查找sudoRole对象，导致已通过身份验证的攻击者对任一子树具有写入权限时，可注入sudoR CVE-2026-14474 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2026-14474

一、 漏洞 CVE-2026-14474 基础信息

受影响产品

二、漏洞 CVE-2026-14474 的公开POC

三、漏洞 CVE-2026-14474 的情报信息

CVE-2026-14474 厂商安全公告 (23)

• 🔗 CVE-2026-14474 - Red Hat Customer Portal vdb-entry x_refsource_REDHAT
• 🔗 2496556 – (CVE-2026-14474) CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation 查看完整文章 issue-tracking x_refsource_REDHAT
• 🔗 RHSA-2026:49841 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:46990 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:54581 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:56911 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:59831 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:49839 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:54553 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:49843 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:57483 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:54769 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:41937 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:56853 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:49844 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:54599 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:54187 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:42122 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:49842 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:50109 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:56786 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:46482 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:60019 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT

• https://www.cve.org/CVERecord?id=CVE-2026-14474

同批安全公告 · Red Hat · 2026-07-07 · 共 7 条

IV. Related Vulnerabilities

V. Comments for CVE-2026-14474