CVE-2026-81205: LDAP Authentication Module for Drupal Exposes Sensitive Information
Summary
CVE-2026-81205: This module enables users to authenticate using LDAP or Active Directory credentials. Affects drupal/ldap_auth versions < 2.2.1. Fixed in 2.2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The LDAP Authentication module for Drupal allows users to authenticate using LDAP or Active Directory credentials. It is widely used in environments where centralized user management is required. The module facilitates seamless integration with existing directory services, enabling organizations to leverage their existing user databases for authentication purposes.
Vulnerability Detail
The vulnerability arises from the module's failure to adequately sanitize user-supplied input before using it in an LDAP search filter. This oversight can lead to an attacker being able to manipulate the search filter, potentially exposing sensitive information that should not be accessible to them. The implications of this vulnerability include unauthorized access to user data and the potential for further exploitation within the system.
How To Fix
Minimum fixed version
2.2.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can restrict access to the LDAP Authentication module for untrusted users until the update is applied. This can be done by adjusting user permissions in the Drupal admin interface.
Conclusion
The LDAP Authentication module for Drupal contains a critical vulnerability (CVE-2026-81205) that can expose sensitive information due to insufficient input sanitization. It is crucial to update the module to version 2.2.1 or later to mitigate this risk. Users are encouraged to monitor their applications for vulnerabilities using tools like Vulert.
See every vulnerability recorded for drupal/ldap_auth →
FAQ
CVE-2026-81205 is a vulnerability in the LDAP Authentication module for Drupal that allows attackers to exploit insufficient input sanitization, potentially exposing sensitive information.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, consider restricting access to the module for untrusted users as a temporary workaround.
Failing to address this vulnerability could lead to unauthorized access to sensitive user information and potential exploitation of the system.
More information about the LDAP Authentication module can be found on its official Drupal page and GitHub repository.
