CVE-2026-104047

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description When configured to use Microsoft Entra ID, SSSD fails to properly sanitize search inputs before incorporating them into directory query filters. A local user can exploit this by submitting a crafted lookup request to manipulate the query logic, leading to unauthorized information disclosure from the directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.