OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-104045

MEDIUM · CVSS 4.7 EPSS 0.10% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A race condition vulnerability in SSSD allows local users to exploit the autofs responder, potentially leading to a Denial of Service (DoS) by causing excessive memory consumption through concurrent map enumeration and invalidation requests. This can disrupt or crash the autofs service, impacting system availability. Organizations utilizing SSSD should prioritize addressing this vulnerability to mitigate the risk of service interruptions.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-104045
Severity
MEDIUM
CVSS
4.7
EPSS
0.10%

Original NVD Description

A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause memory to leak, leading to excessive memory consumption that can disrupt or crash the autofs service.

Related CVEs

Other vulnerabilities affecting the same vendor(s)