CVE-2026-76374: Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information. in Splunk AD LDAP app for Splunk SOAR

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, users with roles permitting action execution can trigger write operations that cause sensitive Active Directory response data to be logged in persistent debug files. This logging behavior may expose sensitive information that could aid an attacker or compromise user data confidentiality. The issue is documented under CVE-2026-76374 with a CVSS 3.1 base score of 4.3, reflecting a network attack vector with low privileges required and no user interaction needed, impacting confidentiality only.

Sensitive Active Directory response data may be written to persistent debug log files accessible to users with certain permissions. This could lead to exposure of sensitive user information or provide attackers with valuable reconnaissance data. There is no indication of impact on integrity or availability. No known exploits are reported in the wild.

A fix is available in version 2.3.8 of the AD LDAP app for Splunk SOAR. Users should upgrade to version 2.3.8 or later to remediate this vulnerability. No additional mitigation steps are indicated in the vendor advisory.