PT-2025-41609 · Pypi+4 · Python-Ldap+4

Lukas-Eu · Published 2025-10-10 · Updated 2026-03-25 · CVE-2025-61911

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions python-ldap versions prior to 3.4.5

Description The ldap.filter.escape filter chars method in python-ldap can be exploited to bypass character escaping when a crafted list or dict is provided as the assertion value parameter, and escape mode is set to 1. This can lead to LDAP injection attacks, potentially allowing unauthorized disclosure or manipulation of LDAP data. The issue occurs because the method does not adequately ensure a fully escaped return value in this specific configuration. The vulnerable method is ldap.filter.escape filter chars.

Recommendations Upgrade to python-ldap version 3.4.5 or later.

Exploit

Fix

Type Confusion

Weakness Enumeration

CWE-843

CWE-75

Related Identifiers

AZL-68430

AZL-68451

BDU:2026-02913

CVE-2025-61911

GHSA-R7R6-CC7P-4V5M

OESA-2025-2681

OESA-2025-2682

OESA-2025-2683

OESA-2025-2684

OESA-2025-2685

OESA-2025-2686

OPENSUSE-SU-2025:15637-1

OPENSUSE-SU-2026:20421-1

SUSE-SU-2025:3695-1

SUSE-SU-2025:3714-1

SUSE-SU-2026:20933-1

USN-7828-1

Affected Products

Debian

Linuxmint

Red Os

Ubuntu

Python-Ldap

References · 61

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61911.json · Exploit
• 🔥 https://github.com/python-ldap/python-ldap/security/advisories/GHSA-r7r6-cc7p-4v5m · Exploit
• https://github.com/python-ldap/python-ldap/commit/3957526fb1852e84b90f423d9fef34c7af25b85a · Patch
• https://cve.org/CVERecord?id=CVE-2025-61911 · Security Note
• https://osv.dev/vulnerability/OESA-2025-2682 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-61911 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61911 · Security Note
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r7r6-cc7p-4v5m · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7828-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-68430 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2684 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3714-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20933-1 · Vendor Advisory