Low severityNVD Advisory· Published Feb 5, 2026· Updated Apr 15, 2026

CVE-2026-1966

Description

YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration view could obtain LDAP credentials, potentially enabling unauthorized access to external directory services.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Yugabytedb/Yugabyte Dbllm-fuzzy

Patches

Vulnerability mechanics

References

docs.yugabyte.com/stable/secure/vulnerability-disclosure-policy/nvd

News mentions

No linked articles in our index yet.

cvss	0.065
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000