LDAP Credential Exposure in Netatalk by Netatalk Project

CVE-2026-44052

What is CVE-2026-44052?

Netatalk versions 2.1.0 through 4.4.2 are susceptible to a vulnerability that exposes LDAP simple-bind passwords in log files as cleartext. This allows an attacker with log file access to retrieve sensitive LDAP credentials, potentially leading to unauthorized access and further exploitation of the system. It is crucial for administrators to review log management practices and implement security measures to prevent unauthorized access to these logs.

References