CVE-2026-11770

Name of the Vulnerable Software and Affected Versions 389 Directory Server (affected versions not specified)

Description An unauthenticated remote attacker can perform an LDAP filter injection within the CleanAllRUV replication status-check extended operation. The handler executes the search against cn=config using elevated replication plugin privileges and returns a boolean match result. This allows an attacker to extract sensitive server configuration metadata, such as replication bind DNs and password storage scheme information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.