What’s Vulnerable › Vulnerabilities

CVE-2026-104032: Sssd: sssd: denial of service via unprivileged autofs cache invalidation

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-10-06 · updated 2026-10-28
• Weakness: CWE-408

Description

A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of Service (DoS) from degraded automount availability and elevated resource consumption.

Affected products

• [UNKNOWN] sssd: 2.12.0 (and their updates)
• Red Hat Enterprise Linux: 7.0, 8.0, 9.0, 10.0 (and their updates)
• Red Hat OpenShift Container Platform 4.18: 4.0 (and their updates)
• Red Hat OpenShift Container Platform 4.18: all versions
• Red Hat Enterprise Linux 10: all versions
• Red Hat Enterprise Linux 7: all versions
• Red Hat Enterprise Linux 8: all versions
• Red Hat Enterprise Linux 9: all versions

References

• https://access.redhat.com/security/cve/CVE-2026-104032
• https://bugzilla.redhat.com/show_bug.cgi?id=2479381

Get alerted when CVE-2026-104032 or the next vulnerability affects your stack