The vulnerability CVE-2026-11748 affects centraldogma-server-auth-shiro versions prior to 0.84.0. It is caused by improper sanitization of LDAP filter input in the SearchFirstActiveDirectoryRealm, where the login username is directly substituted into the LDAP search filter without escaping LDAP metacharacters. This can be exploited by unauthenticated attackers to manipulate the LDAP query, leading to authentication confusion and directory enumeration. The CVSS 4.0 base score is 6.9, indicating a medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality and integrity impact.

An unauthenticated attacker can exploit this vulnerability to manipulate LDAP search filters, potentially causing authentication confusion and enabling enumeration of the directory structure. This may lead to unauthorized information disclosure about the directory and could complicate authentication processes, but does not directly allow privilege escalation or code execution based on the available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is indicated and no vendor advisory content is provided, users should monitor LY Corporation's advisories for updates. Until a fix is available, consider restricting access to the authentication service and applying LDAP input validation or filtering as a temporary mitigation if feasible.