Vulnerability Intelligence Report
389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
CVE-2026-19843
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.
Injection
No Active Exploit Signals
CVSS Base Score
8.4
HIGH
Exploitability:1.7
Impact Score:6.1
EPSS Probability:0.47%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-78 ↗Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Red Hat | Red Hat Directory Server 11.7 E4S for RHEL 8 | 8080020260903102346.f969626e < * (unaffected) |
| Red Hat | Red Hat Directory Server 11.9 for RHEL 8 | 8100020260904171440.37ed7c03 < * (unaffected) |
| Red Hat | Red Hat Directory Server 12.2 E4S for RHEL 9 | 9020020260903155914.1674d574 < * (unaffected) |
| Red Hat | Red Hat Directory Server 12.4 E4S for RHEL 9 | 9040020260903102623.1674d574 < * (unaffected) |
| Red Hat | Red Hat Directory Server 12.6 EUS for RHEL 9 | 9060020260903100230.1674d574 < * (unaffected) |
| Red Hat | Red Hat Directory Server 12.8 for RHEL 9 | 9080020260908092641.1674d574 < * (unaffected) |
| Red Hat | Red Hat Directory Server 13.0 EUS for RHEL 10 | 0:3.0.6-4.el10dsrv < * (unaffected) |
| Red Hat | Red Hat Directory Server 13.2 for RHEL 10 | 0:3.2.0-7.el10dsrv < * (unaffected) |
| Red Hat | Red Hat Directory Server 11 | all |
| Red Hat | Red Hat Directory Server 12 | all |
| Red Hat | Red Hat Enterprise Linux 10 | all |
| Red Hat | Red Hat Enterprise Linux 6 | all |
| Red Hat | Red Hat Enterprise Linux 7 | all |
| Red Hat | Red Hat Enterprise Linux 8 | all |
| Red Hat | Red Hat Enterprise Linux 8 | all |
| Red Hat | Red Hat Enterprise Linux 9 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2026-08-14T08:02:44 |
| Published | 2026-09-07T14:14:58 |
| Patch Date | 2026-09-07 |
| Last Updated | 2026-09-08T19:43:27 |
Community Chatter & Buzz