Skip to content
Threat Feed
Subscribe

Product

SSSD AD GPO Provider

1 brief RSS
high advisory

CVE-2026-14476: SSSD AD GPO Provider Path Traversal to Root File Write and Authentication Bypass

A path traversal vulnerability (CVE-2026-14476) in SSSD's Active Directory Group Policy Object (AD GPO) provider allows an authenticated attacker with AD GPO management access to write arbitrary files outside the GPO cache directory with root privileges, leading to Kerberos configuration injection and potential authentication bypass on Red Hat Enterprise Linux systems.

SSSD AD GPO provider +5 path-traversal privilege-escalation authentication-bypass kerberos linux red-hat sssd cve
5t 1c