{"id":"CVE-2026-111347","title":"go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords","summary":"go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-321"],"vendor":"opsre","product":"go-ldap-admin","affected":["go-ldap-admin <= 0.6.2"],"published":"2026-10-15","updated":"2026-10-16","sourceUpdated":"2026-10-16T19:17:04.300","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-111347","references":[{"url":"https://github.com/opsre/go-ldap-admin","label":"disclosure@vulncheck.com"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L20-L24","label":"disclosure@vulncheck.com"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L76-L77","label":"disclosure@vulncheck.com"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/logic/base_logic.go#L188-L199","label":"disclosure@vulncheck.com"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/routes/base_routes.go#L50","label":"disclosure@vulncheck.com"},{"url":"https://hackmd.io/@hieuPenguinnn/go-ldap-admin-hardcoded-rsa-key-decrypt-oracle-and-unauth-password-reset","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/go-ldap-admin-through-0.6.2-hard-coded-rsa-private-key-via-base-decryptpwd","label":"disclosure@vulncheck.com"},{"url":"https://hackmd.io/@hieuPenguinnn/go-ldap-admin-hardcoded-rsa-key-decrypt-oracle-and-unauth-password-reset","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00497,"epssPercentile":0.42408,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-16T18:00:25.393949Z"},"ingestedAt":"2026-10-15T22:48:25.454Z","slug":"CVE-2026-111347","body":"## Overview\n\ngo-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP credentials for reuse.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":32.5,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":223189,"id":"CVE-2026-111347","ts":1792176242263,"field":"exploit_available","old":"false","new":"true"}]}