{"id":"CVE-2026-111347","title":"go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd","summary":"go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-321"],"vendor":"opsre","product":"go-ldap-admin","affected":["go-ldap-admin <= 0.6.2"],"published":"2026-10-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T21:43:38.664Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111347","references":[{"url":"https://hackmd.io/@hieuPenguinnn/go-ldap-admin-hardcoded-rsa-key-decrypt-oracle-and-unauth-password-reset"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L20-L24"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L76-L77"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/routes/base_routes.go#L50"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/logic/base_logic.go#L188-L199"},{"url":"https://github.com/opsre/go-ldap-admin"},{"url":"https://www.vulncheck.com/advisories/go-ldap-admin-through-0.6.2-hard-coded-rsa-private-key-via-base-decryptpwd","label":"VulnCheck Advisory: go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd"}],"tags":["cve.org"],"ingestedAt":"2026-10-15T22:48:25.454Z","slug":"CVE-2026-111347","body":"## Overview\n\ngo-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP credentials for reuse.\n\n## Affected\n\n- `go-ldap-admin <= 0.6.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":32,"depthScoreParts":{"impact":32.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}