CVE-2026-50889

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-50889
An input handling flaw in the HTTP refresh token process of LLDAP v0.6.2 allows attackers to cause a Denial of Service (DoS) via sending a crafted refresh-token header.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://gist.github.com/pyuysig/41937c47514ff63d66a3be98ab8e8a7d Exploit Third Party Advisory
https://gist.github.com/pyuysig/41937c47514ff63d66a3be98ab8e8a7d Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:lldap:lldap:0.6.2:*:*:*:*:*:*:*
History

17 Jun 2026, 16:44

Type Values Removed Values Added
First Time Lldap
Lldap lldap
References () https://gist.github.com/pyuysig/41937c47514ff63d66a3be98ab8e8a7d - () https://gist.github.com/pyuysig/41937c47514ff63d66a3be98ab8e8a7d - Exploit, Third Party Advisory
CPE cpe:2.3:a:lldap:lldap:0.6.2:*:*:*:*:*:*:*

16 Jun 2026, 17:16

Type Values Removed Values Added
CWE CWE-400
References () https://gist.github.com/pyuysig/41937c47514ff63d66a3be98ab8e8a7d - () https://gist.github.com/pyuysig/41937c47514ff63d66a3be98ab8e8a7d -
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

15 Jun 2026, 20:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-06-15 20:16

Updated : 2026-06-17 16:44

NVD link : CVE-2026-50889

Mitre link : CVE-2026-50889

CVE.ORG link : CVE-2026-50889

JSON object : View

Products Affected

lldap

  • lldap
CWE
CWE-400

Uncontrolled Resource Consumption