CVE-2026-86345

Name of the Vulnerable Software and Affected Versions 389-ds-base (affected versions not specified)

Description A flaw exists where the server fails to discard plaintext bytes buffered from a client connection during StartTLS negotiation. This allows an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade. Due to a messageID collision, the response to the injected message is delivered to the client instead of the response to the client's own pending operation. Consequently, a client application may incorrectly treat a failed authentication (bind) attempt as successful.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.