This vulnerability in PowerDNS Authoritative arises from incomplete escaping of LDAP queries when the 8bit-dns feature is enabled. This improper neutralization of special elements leads to LDAP injection, enabling users to perform unauthorized queries on internal domain subtrees. The affected versions are 4.9.0 and 5.0.0. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with high attack complexity and low privileges required, resulting in high confidentiality impact but no integrity or availability impact. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation allows an attacker with low privileges to perform unauthorized LDAP queries on internal domain subtrees, potentially exposing sensitive information. The impact is limited to confidentiality, with no reported effects on integrity or availability. There are no known active exploits targeting this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling the 8bit-dns feature if feasible or restrict access to the affected PowerDNS Authoritative instances to trusted users only. Monitor vendor communications for updates on patches or workarounds.