CVE-2026-25644

DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8.

Score

CVSS 3.1 7.5 High

Status

Analyzed - security-advisories@github.com

Published

2026-02-06

Last modified

2026-02-09

Weaknesses

CWE-295

Affected products

• Datahub (Datahub)
• Datahub (Datahub-project)

References

• https://github.com/datahub-project/datahub/security/advisories/GHSA-j34h-x7qg-4qw5