CVE-2026-53658 | Hyperledger fabric-ca up to 1.5.20 LDAP Client client.go Client.GetUser Username ldap injection

September 15, 2026 Yanac

A vulnerability, which was classified as critical, was found in Hyperledger fabric-ca up to 1.5.20. This issue affects the function Client.GetUser of the file lib/server/ldap/client.go of the component LDAP Client. The manipulation of the argument Username results in ldap injection.

This vulnerability is cataloged as CVE-2026-53658. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More