Skip to content
Threat Feed
Subscribe

Vendor

Netflix

3 briefs RSS
high advisory

Authorization Bypass in Lemur Leading to Unauthorized Certificate Revocation

An authorization bypass vulnerability in Lemur allows authenticated users to revoke arbitrary certificates by creating duplicate certificate records and bypassing ownership and endpoint-attached safeguards.

lemur +2 certificate-management authorization-bypass cve-2026-71417 cloud ssrf vulnerability cve-2026-70666
1r 5t 1c
critical advisory

Lemur 1.9.0 Server-Side Request Forgery and IDOR Lead to AWS IAM Compromise

A low-privilege user with a freshly-provisioned SSO account in Netflix's Lemur certificate management service (versions <= 1.9.0) can exploit a Server-Side Request Forgery (SSRF) vulnerability in the ACME authority creation endpoint to reach the AWS EC2 Instance Metadata Service (IMDS), exfiltrating AWS STS credentials, and leveraging a creator-equality Insecure Direct Object Reference (IDOR) vulnerability for permanent access to PKI private keys, resulting in AWS IAM compromise and persistent certificate access.

github.com/Netflix/lemur <= 1.9.0 +2 ssrf idor aws iam pki credential-access exfiltration webserver
2r 5t 5i
high advisory

Lemur LDAP Filter Injection Vulnerability

Lemur versions before 1.9.0 are vulnerable to LDAP filter injection, where an authenticated LDAP user can inject LDAP filter metacharacters through the username field to manipulate group membership queries and escalate their privileges to administrator.

Lemur ldap injection privilege-escalation
2r 1t