CVE-2026-104047

Undergoing Analysis Undergoing Analysis - In Progress

SSSD Entra ID Query Filter Injection Vulnerability

Publication date: 2026-10-06

Last updated on: 2026-10-09

Assigner: redhat-SADP

Description

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause unauthorized information disclosure from the directory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-104047

EUVD

EUVD-2026-93941

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	enterprise_linux	7.0
redhat	enterprise_linux	8.0
redhat	openshift_container_platform	4.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux	10.0
fedoraproject	sssd	2.12.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-140	The product does not neutralize or incorrectly neutralizes delimiters.

Attack-Flow Graph

Executive Summary

This vulnerability is in SSSD when configured with Microsoft Entra ID. It allows improperly sanitized search inputs to be used in directory query filters. A local attacker can craft lookup requests to manipulate query logic, potentially exposing unauthorized information from the directory.

Detection Guidance

To detect this vulnerability, inspect SSSD logs for unusual directory query patterns or unauthorized information disclosure events. Check for crafted lookup requests by reviewing authentication logs for unexpected query filters or errors in Microsoft Entra ID integration. No specific commands are provided in the context.

Impact Analysis

A local user could exploit this to access sensitive directory information they should not have permission to view. This could lead to data leaks or unauthorized access to user details, depending on the directory contents.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating confidentiality requirements in GDPR and HIPAA. Organizations using SSSD with Microsoft Entra ID may face compliance risks due to potential data leaks.

Mitigation Strategies

Update SSSD to the latest patched version to address the improper input sanitization issue. Review and restrict local user permissions to prevent unauthorized directory query manipulation. Monitor directory access logs for unusual query patterns.

Hi! I’m here to help you understand CVE-2026-104047. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70