sssd vulnerabilities
CVEs whose affected-version data names the sssd package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
32 CVEsRSS
CVE-2026-14474High· 8.8A flaw was found in SSSD's LDAP sudo provider
A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subt…
▾ TwilightRed Hat · sssdEPSS 0.57%via NVD
CVE-2026-6245Medium· 5.5A flaw was found in the System Security Services Daemon (SSSD)
A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-ter…
▾ Sunlitfedoraproject · sssdEPSS 0.14%via NVD