CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause unauthorized information disclosure from the directory.

This vulnerability is rated as having Moderate impact because exploitation requires low-privileged local access and depends on an explicit, non-default configuration using the Entra ID identity provider. In typical Red Hat Enterprise Linux environments, this integration is not enabled by default. While an authenticated local user can manipulate generated query filters to retrieve broader directory records or cause processing overhead, the flaw does not facilitate arbitrary code execution or host-level privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.