Vulnerability · Published Dec 3, 2025 · Assigned by VulDB

CVE-2025-13948opsre go-ldap-admin JWT docker-compose.yaml hard-coded key

Medium 5.6

In plain English

A medium-severity security flaw in go-ldap-admin from opsre. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).

Severity (CVSS 3.1)5.6Medium

Exploit odds (30 days)0.3%top 74.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in opsre go-ldap-admin up to 20251011. This issue affects some unknown processing of the file docs/docker-compose/docker-compose.yaml of the component JWT Handler. Executing manipulation of the argument secret key can lead to use of hard-coded cryptographic key . The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized.

Affected products (as reported)

Vendor	Product	Versions
opsre	go-ldap-admin	20251011

Weakness: CWE-321, CWE-320 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-334163 | opsre go-ldap-admin JWT docker-compose.yaml hard-coded key vdb-entry, technical-description
VDB-334163 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #692213 | https://github.com/opsre https://github.com/opsre/go-ldap-admin Latest Authorization Bypass third-party-advisory
https://gist.github.com/H2u8s/a51ac1fe38d62746d1425b70ff49420c exploit