Project: 
LDAP / Active Directory Integration
Date: 
2026-August-26
Security risk: 
Moderately critical 14 ∕ 25 AC:Basic/A:None/CI:Some/II:None/E:Proof/TD:All
Vulnerability: 
Information Disclosure
Affected versions: 
<2.2.1
CVE IDs: 
CVE-2026-81205
Description: 

This module enables users to authenticate using LDAP or Active Directory credentials.

The module does not sufficiently sanitize user-supplied input before incorporating it into an LDAP search filter. This allows an attacker to discover additional information they should not normally be able to.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: