What’s Vulnerable › Vulnerabilities
CVE-2026-40606: ProxyAuth Addon LDAP Injection in mitmproxy
- Severity: medium (CVSS 4.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-04-21 · updated 2026-06-17
- Weakness: CWE-90
Description
mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmproxy 12.2.1 and below, the builtin LDAP proxy authentication does not correctly sanitize the username when querying the LDAP server. This allows a malicious client to bypass authentication. Only mitmproxy instances using the proxyauth option with LDAP are affected. This option is not enabled by default. The vulnerability has been fixed in mitmproxy 12.2.2 and above.
Affected products
- mitmproxy: before 12.2.2 — fixed in 12.2.2
How to fix
Upgrade to a fixed version: mitmproxy 12.2.2. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-40606 or the next vulnerability affects your stack