Skip to content
Threat Feed
Subscribe

Vendor

SSSD

1 brief RSS
high advisory

CVE-2026-14474 - SSSD LDAP sudo Provider Privilege Escalation

A vulnerability in SSSD's LDAP sudo provider, CVE-2026-14474, allows an authenticated attacker to achieve root-level privilege escalation by injecting a malicious sudoRole object into any writable LDAP subtree when the `ldap_sudo_search_base` option is not explicitly configured on SSSD-enrolled Linux hosts.

SSSD LDAP sudo provider linux privilege-escalation cve vulnerability
2t 1c