CVE-2026-11770 – 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

CVE ID :CVE-2026-11770

Published : July 31, 2026, 9:18 a.m. | 27 minutes ago

Description :A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…