CERT24CVE-2026-87853 — SSSD IdP authentication prefix comparison allows cross-user impersonationLoading data…
CERT24Threat Observatory
Period

CVE-2026-87853 — SSSD IdP authentication prefix comparison allows cross-user impersonation

A flaw in the SSSD IdP authentication provider may allow an attacker to authenticate as a target user when the attacker's IdP identifier is a strict prefix of the target user's identifier.

← Back to intelligence

CVE-2026-87853 — SSSD IdP authentication prefix comparison allows cross-user impersonation

A flaw in the SSSD IdP authentication provider may allow an attacker to authenticate as a target user when the attacker's IdP identifier is a strict prefix of the target user's identifier.