CVE-2026-50889

An input handling flaw in the HTTP refresh token process of LLDAP v0.6.2 allows attackers to cause a Denial of Service (DoS) via sending a crafted refresh-token header.

CVSS v3.1 CNA

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.49% chance of exploitation in the next 30 days, 41st percentile

Published

2026-06-15

Updated

2026-06-16

Proof-of-concept exploits (1)

• https://gist.github.com/pyuysig/41937c47514ff63d66a3be98ab8e8a7d

References

• CVE Record
• NVD entry