SSSD · CVE-2026-127100 · Infrastructure
NO FIX YET
SSSD's PAM responder, when built with the JSON PAM extension, dereferences a NULL pointer if an authentication request carries a non-string OAuth2 code value. A local attacker can crash the responder and disrupt SSSD-backed logins.
first public Nov 12, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Only systems running SSSD with a build that has the JSON PAM extension enabled are exposed, and the attacker needs local access to submit the crafted request. Systems using SSSD without that extension, or without local untrusted users, are less exposed. The sources do not name the affected versions.
Not affected if default-build, no-local-access
Who cares linux, pam, self-hosted, sssd
Unknown from the sources.
No fix yet, per the sources.
A flaw was found in SSSD's PAM responder on builds with the JSON PAM extension enabled. A local attacker can submit a crafted authentication request containing a non-string OAuth2 code value. Missing JSON type validation leads to a NULL pointer dereference, terminating the PAM responder and disrupting SSSD-backed authentication.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.