Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-25644

DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade

Description

DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

datahub-project datahub

  • < 1.3.1.8affected

References