CVE-2026-104033

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description An issue exists when SSSD is configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes. The system fails to recognize an expiration value of zero as an expired account. Consequently, a user with valid credentials for an account that should be expired can bypass access controls and authenticate to the system, allowing unauthorized access to persist after the account was intended to be deactivated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.