TLS CVE-2026-25644
HIGHCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionNVD
DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8.
AnalysisAI
DataHub versions prior to 1.3.1.8 are vulnerable to man-in-the-middle attacks during LDAP authentication due to insufficient TLS certificate validation, allowing attackers on the network to intercept and eavesdrop on sensitive authentication credentials. An unauthenticated attacker can downgrade the TLS connection to capture plaintext LDAP credentials without requiring user interaction. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Audit all DataHub deployments to identify LDAP ingestion source usage and document affected systems. Within 7 days: Implement network segmentation to restrict DataHub-to-LDAP traffic to dedicated, monitored VLANs and enforce TLS 1.2+ minimum on all connections. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today