CVE-2026-24130
Last modified
CVE-2026-24130 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Arksine | Moonraker | < 0.10.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-24130?
How severe is CVE-2026-24130?
How do I fix CVE-2026-24130?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-24125Tina is a headless content management system. Prior to 2.1.2…6.3
- CVE-2026-24126Weblate is a web based localization tool. Prior to 5.16.0, t…9.1
- CVE-2026-24127Typemill is a flat-file, Markdown-based CMS designed for inf…6.1
- CVE-2026-24128XWiki Platform is a generic wiki platform offering runtime s…6.1
- CVE-2026-24129Runtipi is a Docker-based, personal homeserver orchestrator …8.8
- CVE-2026-2413The Ally – Web Accessibility & Usability plugin for WordPres…7.5
- CVE-2026-24131pnpm is a package manager. Prior to version 10.28.2, when pn…5.5
- CVE-2026-24132Orval generates type-safe JS clients (TypeScript) from any v…9.8
- CVE-2026-24133jsPDF is a library to generate PDFs in JavaScript. Prior to …6.5
- CVE-2026-24134StudioCMS is a server-side-rendered, Astro native, headless …6.5
- CVE-2026-24135Gogs is an open source self-hosted Git service. In version 0…8.1
- CVE-2026-24136Saleor is an e-commerce platform. Versions 3.2.0 through 3.2…7.5
Are you affected by CVE-2026-24130?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST