CVE-2026-92821

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description A flaw exists in SSSD when configured to evaluate password expiration warnings before restrictive access rules in LDAP (Lightweight Directory Access Protocol) environments. In this configuration, an expired-password warning causes the system to terminate rule evaluation prematurely and treat the access request as successful. A remote authenticated user with an expired password who utilizes an alternative authentication method, such as SSH public key authentication, can exploit this behavior to bypass access control restrictions and gain unauthorized access to protected systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.