Vulnerability Description
YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration view could obtain LDAP credentials, potentially enabling unauthorized access to external directory services.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-1966?
CVE-2026-1966 is a documented vulnerability. YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration view could obtain LDAP credentials, potent...
How severe is CVE-2026-1966?
CVSS scoring is not yet available for CVE-2026-1966. Check NVD for updates.
Is there a patch for CVE-2026-1966?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.