CVE-2026-44304

Lemur manages TLS certificate creation. Prior to 1.9.0, Lemur's LDAP authentication module (lemur/auth/ldap.py) constructs LDAP search filters using unsanitized user input via Python string interpolation. An authenticated LDAP user can inject LDAP filter metacharacters through the username field to manipulate group membership queries and escalate their privileges to administrator. This vulnerability is fixed in 1.9.0.

• CWE-90

• https://github.com/Netflix/lemur/security/advisories/GHSA-3r34-vq8m-39gh
• https://github.com/Netflix/lemur/security/advisories/GHSA-3r34-vq8m-39gh

Published

May 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44295protobufjs-cli is the command line add-on for protobuf.js. P…8.7
• CVE-2026-44296Deskflow is a keyboard and mouse sharing app. Prior to 1.26.…7.5
• CVE-2026-44298Kimai is an open-source time tracking application. From vers…4.9
• CVE-2026-4430Out-of-bounds write vulnerability in The Document Foundation…7.8
• CVE-2026-44301Hugo is a static site generator. From 0.43 to before 0.161.0…8.1
• CVE-2026-44302Snappier is a high performance C# implementation of the Snap…7.5
• CVE-2026-44305Lemur manages TLS certificate creation. Prior to 1.9.0, when…6.8
• CVE-2026-44306Statamic is a Laravel and Git powered content management sys…5.3
• CVE-2026-44307Mako is a template library written in Python. Prior to 1.3.1…8.7
• CVE-2026-44308Spring Cloud AWS simplifies using AWS managed services in a …6.3
• CVE-2026-44309Gitsign is a keyless Sigstore to signing tool for Git commit…5.3
• CVE-2026-4431The Easy Post Submission plugin for WordPress is vulnerable …9.1