Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-07-28T10:00:00 samba: authenticated LDAP access to internal LDB special DNs permits domain takeover 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-284

A flaw was found in Samba Active Directory Domain Controller (AD DC). Improper authorization checks allow an authenticated low-privilege domain user to modify internal LDB special records through LDAP. By altering the DSDB module configuration, an attacker can bypass directory ACL enforcement on new LDAP connections and elevate privileges, potentially leading to complete domain compromise.

Red Hat Product Security has rated this vulnerability as having an Important security impact for Samba deployments operating as an Active Directory Domain Controller (AD DC). ``` Red Hat Enterprise Linux (RHEL) context: Default installations of Red Hat Enterprise Linux (RHEL) are not affected. RHEL does not ship or support the Samba Active Directory Domain Controller (AD DC) role where this internal LDB filtering flaw exists. ``` Red Hat would like to thank OpenAI Security Research for reporting this issue. Red Hat Enterprise Linux 10 Not affected samba Red Hat Enterprise Linux 6 Not affected samba Red Hat Enterprise Linux 6 Not affected samba4 Red Hat Enterprise Linux 7 Not affected samba Red Hat Enterprise Linux 8 Not affected samba Red Hat Enterprise Linux 9 Not affected samba Red Hat OpenShift Container Platform 4 Not affected openshift/ose-rhel-coreos-9 https://www.cve.org/CVERecord?id=CVE-2026-58221 https://nvd.nist.gov/vuln/detail/CVE-2026-58221 https://bugzilla.samba.org/show_bug.cgi?id=16147 https://www.samba.org/samba/security/CVE-2026-58221.html