A vulnerability classified as critical was found in Apache Hertzbeat up to 1.7.1. This impacts an unknown function of the component JNDI Handler. The manipulation results in ldap injection.
This vulnerability is known as CVE-2025-48208. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is advised.
