CVE-2026-104048CWE-1025

CVE-2026-104048

Medium · published October 7, 2026

CVSS v3.1
6.8
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account can bypass access policies and gain unauthorized access to protected services or hosts.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00277 · 19.0th percentile
Weakness
CWE-1025 · Comparison Using Wrong Factors
Published
2026-10-07T00:17Z
Affected products (6)
ProductVersionsFixed in
fedoraproject/sssdall versions—
redhat/openshift_container_platformall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
References (3)
https://access.redhat.com/security/cve/CVE-2026-104048 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2478613 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2478613 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 08 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 06 OCT 19:34Z
    Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
    cvelistv5