CVE Catalog
CVE-2026-50889
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.44%
35th percentile - higher than 35% of all known CVEs
Summary
In LLDAP v0.6.2, there is an input handling flaw in the HTTP refresh token process that allows attackers to cause a Denial of Service (DoS) by sending a crafted refresh-token header.
Risk Assessment
The organization may experience service downtime, leading to loss of user trust and potential financial losses.
Recommendation
It is recommended to upgrade to the latest version of LLDAP to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
An input handling flaw in the HTTP refresh token process of LLDAP v0.6.2 allows attackers to cause a Denial of Service (DoS) via sending a crafted refresh-token header.