Vulnerability Intelligence Report
Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass
CVE-2026-14476
A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass.
No Active Exploit Signals
CVSS Base Score
8.0
HIGH
Exploitability:1.4
Impact Score:6.1
EPSS Probability:0.67%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-23 ↗Relative Path Traversal
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:2.12.0-3.el10_2.1 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:2.10.2-3.el10_0.5 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | 0:1.16.5-10.el7_9.18 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8 | 0:2.9.4-5.el8_10.5 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8 | 0:2.9.4-5.el8_10.5 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:2.4.0-9.el8_4.5 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | 0:2.4.0-9.el8_4.5 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:2.6.2-4.el8_6.5 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | 0:2.6.2-4.el8_6.5 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:2.8.2-4.el8_8.4 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:2.8.2-4.el8_8.4 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 9 | 0:2.9.8-4.el9_8.1 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 9 | 0:2.9.8-4.el9_8.1 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:2.8.2-5.el9_2.7 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 0:2.9.4-6.el9_4.5 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:2.9.6-4.el9_6.5 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | 412.86.202608241157-0 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | 413.92.202608111330-0 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | 414.92.202608172040-0 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | 415.92.202608180329-0 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | 416.94.202608150307-0 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | 417.94.202608250221-0 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 418.94.202608142238-0 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 4.19.9.6.202608120446-0 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | 4.20.9.6.202608121719-0 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 4.21.9.6.202608122143-0 < * (unaffected) |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | 4.22.9.8.202608130832-0 < * (unaffected) |
| Red Hat | Red Hat Enterprise Linux 6 | all |
| Red Hat | Red Hat OpenShift Container Platform 4 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.668%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2026-07-02T15:18:56 |
| Published | 2026-07-07T09:12:52 |
| Patch Date | 2026-07-07 |
| Last Updated | 2026-09-03T14:25:08 |
Community Chatter & Buzz