A vulnerability, which was classified as critical, has been found in Netflix lemur up to 1.8.x. This impacts an unknown function of the component Global Ldap Module. This manipulation causes improper certificate validation.
This vulnerability is tracked as CVE-2026-44305. The attack is possible to be carried out remotely. No exploit exists.
It is advisable to upgrade the affected component.
