CVE-2026-104032
published 2026-10-06CVE-2026-104032: A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing…
PriorityP423medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.10%
0.6th percentile
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of Service (DoS) from degraded automount availability and elevated resource consumption.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fedoraproject | sssd | — | — |
| fedoraproject | sssd | — | — |
| openshift | ose-rhel-coreos-8 | — | — |
| openshift | ose-rhel-coreos-9 | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | openshift_container_platform | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
sssd autofs denial of service
vuldb·2026-10-06·CVSS 5.5
CVE-2026-104032 [MEDIUM] sssd autofs denial of service
A vulnerability described as critical has been identified in sssd. This affects an unknown part of the component autofs. Executing a manipulation can lead to denial of service.
This vulnerability is handled as CVE-2026-104032. The attack can be executed remotely. There is not any exploit available.
GHSA
A flaw was found in SSSD.
ghsa_unreviewed·2026-10-06
CVE-2026-104032 [MEDIUM] CWE-408 A flaw was found in SSSD.
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of Service (DoS) from degraded automount availability and elevated resource consumption.
Red Hat
sssd: sssd: Denial of Service via unprivileged autofs cache invalidation
vendor_redhat·2026-10-05·CVSS 5.5
CVE-2026-104032 [MEDIUM] CWE-408 sssd: sssd: Denial of Service via unprivileged autofs cache invalidation
sssd: sssd: Denial of Service via unprivileged autofs cache invalidation
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of Service (DoS) from degraded automount availability and elevated resource consumption.
Statement: Red Hat rates this vulnerability as Moderate severity because it is restricted to local denial of service without compromising system confidentiality or integrity. The issue only presents a risk on systems configured with the SSSD automount responder where untrusted local users have access to the responder socket. Under these condit
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-104032 sssd: sssd: Denial of Service via unprivileged autofs cache invalidation [fedora-all]
bugzilla·2026-10-05·CVSS 5.5
CVE-2026-104032 [MEDIUM] CVE-2026-104032 sssd: sssd: Denial of Service via unprivileged autofs cache invalidation [fedora-all]
CVE-2026-104032 sssd: sssd: Denial of Service via unprivileged autofs cache invalidation [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
AI_ONLY_REPORT
package: sssd-2.12.0-1.el10
Summary: Local DoS in autofs responder via unprivileged `auto.master` cache
invalidation (reproducible): repeated
`SSS_AUTOFS_SETAUTOMNTENT("auto.master")` requests from a low-privileged
local user can invalidate global autofs cache state and force repeated
backend refreshes, degrading autofs availability.
Requirements to exploit: A low-privileged local account on a host where the
autofs responder is enabled and reachable by
Bugzilla
CVE-2026-104032 sssd: sssd: Denial of Service via unprivileged autofs cache invalidation
bugzilla·2026-05-18·CVSS 5.5
CVE-2026-104032 [MEDIUM] CVE-2026-104032 sssd: sssd: Denial of Service via unprivileged autofs cache invalidation
CVE-2026-104032 sssd: sssd: Denial of Service via unprivileged autofs cache invalidation
AI_ONLY_REPORT
package: sssd-2.12.0-1.el10
Summary: Local DoS in autofs responder via unprivileged `auto.master` cache
invalidation (reproducible): repeated
`SSS_AUTOFS_SETAUTOMNTENT("auto.master")` requests from a low-privileged
local user can invalidate global autofs cache state and force repeated
backend refreshes, degrading autofs availability.
Requirements to exploit: A low-privileged local account on a host where the
autofs responder is enabled and reachable by unprivileged users. The
backend-amplification aspect is most visible when automount lookups are
active and maps are served from a remote provider such as LDAP, IPA, or AD.
Component affected: `sssd-2.12.0-1.el10` autofs responder, particu
2026-10-06
Published