CVE-2026-14476

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Jul 7, 2026
Source updated: Oct 8, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Red Hat Enterprise Linux 10

Vendor: Red Hat
Product: Red Hat Enterprise Linux 10
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 10 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.12.0-3.el10_2.1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 10.0 Extended Update Support

Vendor: Red Hat
Product: Red Hat Enterprise Linux 10.0 Extended Update Support
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 10.0 Extended Update Support · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.10.2-3.el10_0.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 7 Extended Lifecycle Support

Vendor: Red Hat
Product: Red Hat Enterprise Linux 7 Extended Lifecycle Support
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 7 Extended Lifecycle Support · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:1.16.5-10.el7_9.18	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 8

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.9.4-5.el8_10.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 8

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.9.4-5.el8_10.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.4.0-9.el8_4.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.4.0-9.el8_4.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.6.2-4.el8_6.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.6.2-4.el8_6.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.8.2-4.el8_8.4	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.8.2-4.el8_8.4	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.9.8-4.el9_8.1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.9.8-4.el9_8.1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.8.2-5.el9_2.7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.9.4-6.el9_4.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9.6 Extended Update Support

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9.6 Extended Update Support
Platforms: Unknown
Default status: affected
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9.6 Extended Update Support · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:2.9.6-4.el9_6.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.12

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.12
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-8
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.12 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
412.86.202608241157-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.13

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.13
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.13 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
413.92.202608111330-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.14

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.14
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.14 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
414.92.202608172040-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.15

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.15
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.15 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
415.92.202608180329-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.16

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.16
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
416.94.202608150307-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.17

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.17
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
417.94.202608250221-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.18

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.18
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
418.94.202608142238-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.19

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.19
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.19 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.19.9.6.202608120446-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.20

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.20
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.20 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.20.9.6.202608121719-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.21

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.21
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.21 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.21.9.6.202608122143-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.22

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.22
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.22 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.22.9.8.202608130832-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 6

Vendor: Red Hat
Product: Red Hat Enterprise Linux 6
Platforms: Unknown
Default status: unknown
Package: sssd
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.