CVE-2026-55770 Details

A vulnerability allowing LDAP injection has been identified in OpenBao versions prior to 2.5.5. The issue arises in the LDAP authentication backend when it is configured to use Active Directory UPNDomain paths or UserDN and UserAttr bindings. The vulnerability is rooted in the incorrect escaping of user-controlled input in LDAP search filters. Specifically, the function EscapeLDAPValue, which is meant for escaping distinguished names, was used instead of the appropriate ldap.EscapeFilter function for search filters. This flaw allows an attacker to manipulate the search criteria and potentially access unauthorized directory entries. Exploitation could lead to gaining access to secrets, policies, or modification rights associated with another LDAP identity.

Users can update to OpenBao version 2.5.5 or later, where this vulnerability has been fixed. Instructions for updating can be found in the OpenBao GitHub repository.