Persistent Log Vulnerability in AD LDAP App for Splunk SOAR
CVE-2026-76375

5MEDIUM

Key Information:

Vendor

Splunk
Status
Ad Ldap App For Splunk Soar
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76375?

In versions prior to 2.3.8 of the AD LDAP app for Splunk SOAR, an issue exists where users with appropriate permissions can inadvertently expose sensitive credentials. This is achieved by executing an action that logs the entire connector process environment to a persistent debug file in plaintext, thereby potentially compromising security. For further details, refer to the official advisory.

Affected Version(s)

AD LDAP app for Splunk SOAR 2.3 < 2.3.8

References

https://advisory.splunk.com/advisories/SVD-2026-0806

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gabriel Nitu, Splunk
.