CVE-2026-111347

MediumCVSS 5.9

Published: 15/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 16/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP credentials for reuse.

Risk Assessment

Attackers can decrypt captured passwords and obtain LDAP credentials, leading to unauthorized access to systems.

Recommendation

Update go-ldap-admin to a version later than 0.6.2 if available, and immediately rotate all LDAP credentials that may have been exposed.

Other vulnerabilities in go-ldap-admin

CVE-2025-13948Medium
A vulnerability was determined in opsre go-ldap-admin up to 20251011. This issue affects some unknown processing of the file docs/docker-compose/docker-compose.yaml of the component JWT Handler. Manipulation of the argument secret key can lead to use of hard-coded cryptographic key. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS