Package · Maven

org.apache.druid.extensions:druid-basic-security

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2026-23906

Apache Druid: Authentication Bypass via LDAP Anonymous Bind

Affected Products and Versions * Apache Druid * Affected Versions: 0.17.0 through 35.x (all versions prior to 36.0.0) * Prerequisites: * druid-basic-security extension enabled * LDAP authenticator configured * Underlying LDAP server permits anonymous bind …

Apache Software Foundation Apache Druid org.apache.druid.extensions:druid-basic-security Maven

Feb 10, 2026