Stack Overflow Vulnerability in Apache Directory LDAP API by Apache
CVE-2026-103552

Currently unrated

Key Information:

Vendor: Apache
Status: Apache Directory Ldap Api
Vendor: CVE Published:; 2 October 2026

What is CVE-2026-103552?

The Apache Directory LDAP API is susceptible to a stack overflow vulnerability due to the handling of deeply nested search filters sent by clients before binding. This flaw can lead to a stack overflow in the server's decoder, potentially allowing an attacker to exploit the vulnerability. Users are advised to upgrade to version 1.2.9 to mitigate this risk, as it addresses the identified issue.

Affected Version(s)

Apache Directory LDAP API 1.2.0 < 1.2.9

References

https://lists.apache.org/thread.html/fn3bwknn57266hx66w9v...

vendor-advisory

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 2, 2026
Vulnerability Reserved
Sep 30, 2026

Credit

Claude Security

The Apache Software Foundation

CVE-2026-103552 Data

JSON