LDAP Search Filter Injection Vulnerability in 389 Directory Server by Red Hat
CVE-2026-11770
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 31 July 2026
What is CVE-2026-11770?
A vulnerability exists in Red Hat's 389 Directory Server that allows unauthenticated remote attackers to inject malicious LDAP search filters into the CleanAllRUV replication status-check operation. This flaw enables attackers to exploit the elevated privileges of the replication plugin, allowing them to access sensitive server configuration details. By conducting this injection, attackers can retrieve critical data such as replication bind DNs and the specifics of the password storage scheme, potentially leading to further exploitation of the affected system.
Affected Version(s)
Red Hat Directory Server 11.7 E4S for RHEL 8 8080020260806114250.f969626e
Red Hat Directory Server 11.9 for RHEL 8 8100020260803140625.37ed7c03
Red Hat Directory Server 12.2 E4S for RHEL 9 9020020260730155601.1674d574