CVE-2026-53658

Name of the Vulnerable Software and Affected Versions fabric-ca (affected versions not specified)

Description When configured with an LDAP backend, the software fails to properly escape the username obtained from HTTP Basic authentication before including it in an LDAP uid search filter. This allows an unauthenticated attacker with network access to the CA enrollment endpoint to perform LDAP injection before password validation, potentially redirecting authentication attempts toward a victim account.

Recommendations Update to a fixed version if using an LDAP backend.