CVE-2026-10549

Privilege escalation in Yandex Database PUBLISHED

Description (CNA)

LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauthorized access to the database.

Affected (CNA)

Vendor / product	Versions
Yandex / Yandex Database	affected 0 before 25.3.1.25

CWE

CWE-280

References

https://ydb.tech/docs/ru/security-changelog

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.