A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Microsoft Graph Open Data Protocol (OData) queries. A low-privileged local user can exploit this flaw by submitting a crafted search request, altering query filters to broaden user or group searches. This can lead to information disclosure by retrieving unintended directory objects, as well as a Denial of Service (DoS) through excessive processing and cache population.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2026-104040 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2478915 | Exploit Issue Tracking Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Oct 2026, 21:19
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:fedoraproject:sssd:2.12.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
|
| References | () https://access.redhat.com/security/cve/CVE-2026-104040 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2478915 - Exploit, Issue Tracking, Mitigation, Vendor Advisory | |
| First Time |
Redhat
Redhat enterprise Linux Fedoraproject sssd Redhat openshift Container Platform Fedoraproject |
06 Oct 2026, 02:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-06 02:17
Updated : 2026-10-31 10:16
NVD link : CVE-2026-104040
Mitre link : CVE-2026-104040
CVE.ORG link : CVE-2026-104040
JSON object : View
Products Affected
redhat
- openshift_container_platform
- enterprise_linux
fedoraproject
- sssd
CWE
CWE-140
Improper Neutralization of Delimiters