CVE-2026-44063: LDAP filter injection
An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDAP queries and obtain limited information or modify LDAP entries via crafted filter input.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/netatalkto a version that resolves this vulnerability.Fixed in 4.5.0-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44063?
CVE-2026-44063 has a medium severity rating of 4.2.
How do I fix CVE-2026-44063?
To resolve CVE-2026-44063, upgrade to Netatalk version 4.5.0 or later.
What is CVE-2026-44063 about?
CVE-2026-44063 describes an LDAP filter injection vulnerability in Netatalk that allows remote authenticated attackers to manipulate LDAP queries.
Who is affected by CVE-2026-44063?
Users of Netatalk version 2.1.0 through 4.4.2 are affected by CVE-2026-44063.
Can CVE-2026-44063 lead to data exposure?
Yes, CVE-2026-44063 can allow remote authenticated attackers to obtain limited information from LDAP queries.