Skip to content
OpenAdvisories

Product · SUSE

yast2-auth-client

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-59681

    yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join

    A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ad…

    SUSE yast2-auth-client