High

Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass

Type: advisorySource: Official CVE List1 source record

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.

Announced 7 Jul 2026Source revision 1

Original source ↗

CVE-2026-14476

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-14476

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 10.0 Extended Update Support

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 7 Extended Lifecycle Support

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/12/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Source reference: /containers/cna/affected/13/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Source reference: /containers/cna/affected/14/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.6 Extended Update Support

Source reference: /containers/cna/affected/15/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.12

Source reference: /containers/cna/affected/16/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.13

Source reference: /containers/cna/affected/17/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.14

Source reference: /containers/cna/affected/18/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.15

Source reference: /containers/cna/affected/19/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.16

Source reference: /containers/cna/affected/20/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.17

Source reference: /containers/cna/affected/21/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.18

Source reference: /containers/cna/affected/22/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.19

Source reference: /containers/cna/affected/23/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.20

Source reference: /containers/cna/affected/24/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.21

Source reference: /containers/cna/affected/25/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat OpenShift Container Platform 4.22

Source reference: /containers/cna/affected/26/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 6

Source reference: /containers/cna/affected/27/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.2"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.12.0-3.el10_2.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux_eus:10.0"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.10.2-3.el10_0.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_els:7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:1.16.5-10.el7_9.18",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream",
      "cpe:/a:redhat:enterprise_linux:8::crb",
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.9.4-5.el8_10.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream",
      "cpe:/a:redhat:enterprise_linux:8::crb",
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.9.4-5.el8_10.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.4.0-9.el8_4.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.4.0-9.el8_4.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.6.2-4.el8_6.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.6.2-4.el8_6.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream",
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.8.2-4.el8_8.4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream",
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.8.2-4.el8_8.4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/a:redhat:enterprise_linux:9::crb",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.9.8-4.el9_8.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/a:redhat:enterprise_linux:9::crb",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.9.8-4.el9_8.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.2::appstream",
      "cpe:/o:redhat:rhel_e4s:9.2::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.8.2-5.el9_2.7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.4::appstream",
      "cpe:/o:redhat:rhel_e4s:9.4::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.9.4-6.el9_4.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.6::appstream",
      "cpe:/a:redhat:rhel_eus:9.6::crb",
      "cpe:/o:redhat:rhel_eus:9.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:2.9.6-4.el9_6.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.12::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.12",
    "versions": [
      {
        "status": "unaffected",
        "version": "412.86.202608241157-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.13::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.13",
    "versions": [
      {
        "status": "unaffected",
        "version": "413.92.202608111330-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.14",
    "versions": [
      {
        "status": "unaffected",
        "version": "414.92.202608172040-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.15::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.15",
    "versions": [
      {
        "status": "unaffected",
        "version": "415.92.202608180329-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.16::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.16",
    "versions": [
      {
        "status": "unaffected",
        "version": "416.94.202608150307-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.17::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.17",
    "versions": [
      {
        "status": "unaffected",
        "version": "417.94.202608250221-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "418.94.202608142238-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.19",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.19.9.6.202608120446-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.20::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.20",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.20.9.6.202608121719-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.21::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.21",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.21.9.6.202608122143-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4.22::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.22",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.22.9.8.202608130832-0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "packageName": "sssd",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unknown"
  }
]

Related CVEs: CVE-2026-14476
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #16106 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:11:02 GMT
Publisher date: Tue, 07 Jul 2026 09:12:52 GMT

Read the original announcement