Description
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of Service (DoS) from degraded automount availability and elevated resource consumption.
Affected products
fedoraproject: sssd; redhat: openshift container platform; redhat: enterprise linux
References2
- access.redhat.com/security/cve/CVE-2026-104032 Vendor Advisory
- bugzilla.redhat.com/show_bug.cgi?id=2479381 ExploitIssue TrackingMitigationVendor Advisory
Metrics
- CVSS 3.1
-
5.5
MEDIUM
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 0% percentile: 1 · as of 10 November 2026
- CWE
- CWE-408
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.