CVE-2026-0636

What it actually does

Improper neutralization of special elements in LDAP queries within LDAPStoreHelper allows crafted input to alter query semantics, enabling unauthorized read access to directory data.

Why it matters to the business

Attackers may obtain sensitive directory information such as credentials or organizational data, increasing risk of further compromise or data exposure with minimal attacker effort.

How an attack unfolds

An attacker supplies specially formatted input that reaches LDAPStoreHelper; the unsanitized value is concatenated into an LDAP filter or DN, changing the query logic to return additional entries or bypass access controls.

How to fix it

Upgrade BC-JAVA bcprov to 1.80.2 or later, 1.81.1 or later, or 1.84 or later depending on the branch in use; validate that LDAP input paths no longer accept untrusted data without escaping.

How to confirm the fix worked

Confirm bcprov version is at or above a fixed release, run static analysis or unit tests that exercise LDAPStoreHelper with metacharacter payloads, and verify that injected filters no longer alter result sets.

Typical attack path

1. Locate an application entry point that invokes BC-JAVA LDAP functionality.
2. Send a request containing LDAP metacharacters in a parameter consumed by LDAPStoreHelper.
3. Observe altered query behavior that returns unauthorized directory records.
4. Iterate on payloads to enumerate or extract targeted attributes.

How to detect it

Review application and LDAP server logs for filter strings containing unusual parentheses, asterisks, or attribute comparisons that do not match expected application patterns.

What your security team should do

• Apply the appropriate patched bcprov version immediately given the public disclosure and network-reachable attack vector.
• Audit all code paths that pass user-controlled values to LDAP operations.
• Add input validation and parameterized LDAP queries as defense-in-depth.
• Monitor application logs for LDAP query anomalies or unexpected result volumes.