CVE-2026-111347
go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd
CVSS Score
5.9
EPSS Score
0.0%
EPSS Percentile
0th
go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP credentials for reuse.
| CWE | CWE-321 |
| Vendor | opsre |
| Product | go-ldap-admin |
| Published | Oct 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for opsre go-ldap-admin
Be the first to know when new medium vulnerabilities affecting opsre go-ldap-admin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
opsre / go-ldap-admin
0 ≤ 0.6.2
References
hackmd.io: https://hackmd.io/@hieuPenguinnn/go-ldap-admin-hardcoded-rsa-key-decrypt-oracle-and-unauth-password-reset github.com: https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L20-L24 github.com: https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L76-L77 github.com: https://github.com/opsre/go-ldap-admin/blob/v0.6.2/routes/base_routes.go#L50 github.com: https://github.com/opsre/go-ldap-admin/blob/v0.6.2/logic/base_logic.go#L188-L199 github.com: https://github.com/opsre/go-ldap-admin vulncheck.com: https://www.vulncheck.com/advisories/go-ldap-admin-through-0.6.2-hard-coded-rsa-private-key-via-base-decryptpwd
Credits
hieuPenguinnn