CVE-2026-24130 LOW

CVE-2026-24130: Moonraker with LDAP Enabled Allows Malicious Search Filter Injection

Vendor Arksine
Product moonraker
Weakness CWE-90 · LDAP injection
Published January 22, 2026
Last update January 23, 2026
View on NVD All CVEs

CVSS base score

2.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

What the vulnerability does

01Description

Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.

Key dates

02Disclosure timeline

January 22, 2026 CVE published
January 23, 2026 Record updated