High severity8.0NVD Advisory· Published Sep 17, 2025· Updated Apr 15, 2026
CVE-2025-59518
CVE-2025-59518
Description
In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize _ during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server.
Affected products
1- Range: <2.16.7, >=2.17,<2.21.3
Patches
36f888e84213ca592316cbec7228d01945d48Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
2News mentions
0No linked articles in our index yet.