AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-14474

Red Hat SSSD: insecure default

Red Hat

CVE-2026-14474 · Published Jul 7, 2026 · updated Nov 4, 2026

High8.8
No fix yet
Red Hat advisory

A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo privileges on all SSSD-enrolled hosts.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-1188

More Red Hat advisories

All Red Hat
Medium 6.5Jul 7Red Hat Jastow: cross-site scriptingCVE-2025-12799no fix yetLow 3.7Jul 7Red Hat GStreamer: incorrect control flowCVE-2026-14935no fix yetMedium 4.4Jul 7Red Hat 389-ds-base: attacker could detect plaintext equality across encryptedCVE-2026-14969no fix yetMedium 5.3Jul 7Red Hat Directory Server 11: denial of serviceCVE-2026-14940no fix yetHigh 8.8Jul 7Red Hat 389-ds-base: buffer overflowCVE-2026-11610no fix yetHigh 8.0Jul 7Red Hat SSSD: path traversalCVE-2026-14476no fix yet