CVE-2026-44304

{
  "id": "CVE-2026-44304",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-12T22:16:37.140",
  "lastModified": "2026-10-26T14:10:00.130",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Lemur manages TLS certificate creation. Prior to 1.9.0, Lemur's LDAP authentication module (lemur/auth/ldap.py) constructs LDAP search filters using unsanitized user input via Python string interpolation. An authenticated LDAP user can inject LDAP filter metacharacters through the username field to manipulate group membership queries and escalate their privileges to administrator. This vulnerability is fixed in 1.9.0."
    },
    {
      "lang": "es",
      "value": "Lemur gestiona la creación de certificados TLS. Antes de la versión 1.9.0, el módulo de autenticación LDAP de Lemur (lemur/auth/ldap.py) construye filtros de búsqueda LDAP utilizando entrada de usuario no saneada a través de la interpolación de cadenas de Python. Un usuario LDAP autenticado puede inyectar metacaracteres de filtro LDAP a través del campo de nombre de usuario para manipular consultas de pertenencia a grupos y escalar sus privilegios a administrador. Esta vulnerabilidad está corregida en la versión 1.9.0."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Netflix",
          "product": "lemur",
          "versions": [
            {
              "version": "< 1.9.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-14T12:33:48.858848Z",
          "id": "CVE-2026-44304",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-90"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/Netflix/lemur/security/advisories/GHSA-3r34-vq8m-39gh",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/Netflix/lemur/security/advisories/GHSA-3r34-vq8m-39gh",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}