A flaw was found in sudo in the handling of `ipa hostname`, where `ipa hostname` from `/etc/sssd/sssd.conf` was not propagated in sudo. This leads to a privilege mismanagement issue in applications, where client hosts retain privileges even after they have been retracted. The vulnerability may allow a remote attacker to bypass existing security restrictions and maintain privileges after they have been revoked.