CVE-2026-110256
CVE-2026-110256 · Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter without escaping wildcard characters. Unauthenticated attackers can submit incremental wildcard patterns such as 'a*' to /api/auth/login and measure response timing to enumerate valid LDAP usernames while evading per-username rate limiting.
CVSS 6.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
dockhand
- Versions
- ≥ 0, < 1.0.19: Affected (semver)
- 1.0.19: Not affected (semver)
Update to 1.0.19