AIKIDO-2026-10174

github.com/sgnl-ai/adapters is vulnerable to Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') Pre-CVE Published Feb 16, 2026

Medium Risk

This Affects:

github.com/sgnl-ai/adapters

1.57.0 - 1.67.0

Fixed in 1.68.0

Are you affected? Scan for Free

TL;DR

Affected versions of this package fail to properly escape Distinguished Names (DNs) containing special characters such as parentheses, asterisks, or backslashes before inserting them into LDAP filter queries, which can break filter syntax and trigger invalid LDAP filter errors. An attacker may exploit this by supplying a crafted DN with malicious special characters to manipulate or disrupt LDAP query processing, potentially causing denial of service or unintended query behavior; this is mitigated by using ldap_v3.EscapeFilter() to safely escape DN values before query construction.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

github.com/sgnl-ai/adapters is vulnerable to Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in versions 1.57.0 - 1.67.0.