Log in Start free

Vulnerability · Published Sep 7, 2026 · Assigned by redhat

CVE-2026-19843389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

High 8.4

In plain English

A high-severity OS command injection in Red Hat Directory Server 11 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.5%top 58.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12389-ds-baseno fix listedDEBIAN-CVE-2026-19843
Debian:13389-ds-baseno fix listedDEBIAN-CVE-2026-19843
Ubuntu:22.04:LTS389-ds-baseno fix listedUBUNTU-CVE-2026-19843
Ubuntu:24.04:LTS389-ds-baseno fix listedUBUNTU-CVE-2026-19843
Ubuntu:26.04:LTS389-ds-baseno fix listedUBUNTU-CVE-2026-19843
Ubuntu:26.10389-ds-baseno fix listedUBUNTU-CVE-2026-19843

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 see references
Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8 see references
Red Hat Red Hat Directory Server 11.9 for RHEL 8 see references
Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9 see references
Red Hat Red Hat Directory Server 12.4 E4S for RHEL 9 see references
Red Hat Red Hat Directory Server 12.6 EUS for RHEL 9 see references
Red Hat Red Hat Directory Server 12.8 for RHEL 9 see references
Red Hat Red Hat Directory Server 13.0 EUS for RHEL 10 see references
Red Hat Red Hat Directory Server 13.2 for RHEL 10 see references
Red Hat Red Hat Directory Server 11 see references
Red Hat Red Hat Directory Server 12 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

References