CVE-2026-19843CWE-78

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

High · published September 7, 2026

CVSS v3.1
8.4
EPSS
—
In the wild
Unconfirmed
What it is

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
Not scored
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-09-07T14:14Z
Timeline
  • 07 SEP 14:14Z
    389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
    cvelistv5