CVE-2026-25644

DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade PUBLISHED

Description (CNA)

DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8.

Affected (CNA)

Vendor / product	Versions
datahub-project / datahub	affected < 1.3.1.8

CWE

CWE-295

References

https://github.com/datahub-project/datahub/security/advisories/GHSA-j34h-x7qg-4qw5

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.