Detections
Analytics
CVE-2026-87853
high
Description
A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user's identifier can authenticate as the target user.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-75084
https://bugzilla.redhat.com/show_bug.cgi?id=2530888