Vulnerability · Published Oct 15, 2026 · Assigned by VulnCheck
CVE-2026-111347go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd
Medium 5.9
In plain English
A medium-severity security flaw in go-ldap-admin from opsre. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.5%top 57.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP credentials for reuse.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| opsre | go-ldap-admin | 0 – through 0.6.2 |
Weakness: CWE-321 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://hackmd.io/@hieuPenguinnn/go-ldap-admin-hardcoded-rsa-key-decrypt-oracle-and-unauth-password-reset third-party-advisory
- https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L20-L24 technical-description
- https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L76-L77 technical-description
- https://github.com/opsre/go-ldap-admin/blob/v0.6.2/routes/base_routes.go#L50 technical-description
- https://github.com/opsre/go-ldap-admin/blob/v0.6.2/logic/base_logic.go#L188-L199 technical-description
- https://github.com/opsre/go-ldap-admin product
- VulnCheck Advisory: go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd third-party-advisory