CVE-2026-127101
MEDIUM
NVD
CVSS Score
5.5
Severity
MEDIUM
Published
Nov 12, 2026
Vendor
unknown
Description
A flaw was found in SSSD's PAM responder. A local attacker can send an authentication request without first negotiating the client protocol version. The responder dereferences a NULL protocol-version pointer and crashes, disrupting SSSD-backed authentication. Repeated crafted requests can sustain the denial of service.