CVE-2026-14474— Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

Quick assessment

Copy summary Copy citation

Affected

Red Hat Red Hat Enterprise Linux 10

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Red Hat sssd是美国Red Hat公司的一款数据库系统软件。 Red Hat sssd存在配置错误漏洞，该漏洞源于SSSD的LDAP sudo provider中未明确配置ldap_sudo_search_base选项时，SSSD会搜索整个LDAP目录树以查找sudoRole对象，导致已通过身份验证的攻击者对任一子树具有写入权限时，可注入sudoRole对象，授予所有SSSD注册主机上的根级别sudo权限。以下版本受到影响：Red Hat Enterprise Linux 10版本、Red Ha

CVE-2026-14474 affects Red Hat Red Hat Enterprise Linux 10. No confirmed in-the-wild exploitation; assess based on exposure. Red Hat sssd是美国Red Hat公司的一款数据库系统软件。 Red Hat sssd存在配置错误漏洞，该漏洞源于SSSD的LDAP sudo provider中未明确配置ldap_sudo_search_base选项时，SSSD会搜索整个LDAP目录树以查找sudoRole对象，导致已通过身份验证的攻击者对任一子树具有写入权限时，可注入sudoR CVE-2026-14474 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-14474

I. Basic Information for CVE-2026-14474

Affected Products

II. Public POCs for CVE-2026-14474

III. Intelligence Information for CVE-2026-14474

Vendor Advisories for CVE-2026-14474 (23)

• 🔗 CVE-2026-14474 - Red Hat Customer Portal vdb-entry x_refsource_REDHAT
• 🔗 2496556 – (CVE-2026-14474) CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation Read full article issue-tracking x_refsource_REDHAT
• 🔗 RHSA-2026:49841 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:46990 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:54581 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:56911 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:59831 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:49839 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:54553 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:49843 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:57483 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:54769 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:41937 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:56853 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:49844 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:54599 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:54187 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:42122 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:49842 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:50109 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:56786 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:46482 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2026:60019 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT

• https://www.cve.org/CVERecord?id=CVE-2026-14474

Same Patch Batch · Red Hat · 2026-07-07 · 7 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-14474