Remote Command Execution Vulnerability in Samba File Servers and Domain Controllers
CVE-2026-4408
9CRITICAL
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 28 May 2026
What is CVE-2026-4408?
A significant flaw exists in Samba, particularly affecting file servers and classic domain controllers that utilize the 'check password script' feature. When configured with the %u substitution character, this vulnerability allows remote attackers to execute commands by exploiting improper handling of user input. The exploit is most potent in non-standard configurations where this feature is active, leading to the possibility of remote command execution through the samba-dcerpcd service, potentially compromising system integrity.
Affected Version(s)
Red Hat Enterprise Linux 10 0:4.23.5-109.el10_2
Red Hat Enterprise Linux 10.0 Extended Update Support 0:4.21.3-114.el10_0.1
Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:4.10.16-26.el7_9.1