{"id":"CVE-2026-103877","published":"2026-10-02T10:17:06.437","lastModified":"2026-10-07T23:16:58.850","description":"Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API.\n\n\n\nA rogue/compromised LDAP server (or pre-TLS MITM) can answer a client's loadSchema() subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. \n\n\n\nThis issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9.\n\n\n\nUsers are recommended to upgrade to version 2.1.9, which fixes the issue.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://lists.apache.org/thread.html/sys8l881blqfgoc3o724jl32bmjl8pvw","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/02/5","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is a deserialization vulnerability in the Apache Directory LDAP API, allowing attackers to execute arbitrary code via a specially crafted schema object. This matters because it can lead to remote code execution (RCE) on the affected system.","exploitability":"Exploiting this issue is relatively straightforward given a rogue LDAP server or pre-TLS MITM attacker. The attacker must be able to control the schema search response.","blast_radius":"If exploited, this could result in full system compromise, as the vulnerability allows for remote code execution.","remediation":"Upgrade to Apache Directory LDAP API version 2.1.9 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","ldap","api","deserialization","java"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:40:35.922Z"}}