A vulnerability was determined in opsre go-ldap-admin up to 20251011. This issue affects some unknown processing of the file docs/docker-compose/docker-compose.yaml of the component JWT Handler. Executing manipulation of the argument secret key can lead to use of hard-coded cryptographic key
. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized.

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-13948
• https://gist.github.com/H2u8s/a51ac1fe38d62746d1425b70ff49420c
• https://vuldb.com/?ctiid.334163
• https://vuldb.com/?id.334163
• https://vuldb.com/?submit.692213