An unauthenticated LDAP injection vulnerability in OPNsense Core versions prior to 26.1.6 poses a significant risk of unauthorized access and directory information disclosure.

The vulnerability exists because the LDAP authentication connector fails to properly sanitize user input before incorporating it into an LDAP search filter. This allows an unauthenticated attacker to inject LDAP metacharacters via the WebGUI login page to manipulate authentication logic or enumerate directory contents.

Successful exploitation allows an attacker to bypass critical security controls, such as group membership requirements, which are intended to restrict access to the firewall management interface. Given the CVSS score of 8.2, this represents a High severity risk that could lead to full administrative compromise of the routing platform, resulting in potential network-wide exposure, unauthorized access to sensitive internal systems, and a complete loss of confidentiality regarding the directory structure.

Immediate Action: Update OPNsense Core to version 26.1.6 or later immediately to apply the necessary input sanitization fixes.

Proactive Monitoring: Monitor LDAP authentication logs and WebGUI access logs for suspicious input patterns, particularly strings containing LDAP filter metacharacters like parentheses or asterisks.

Compensating Controls: Deploy a Web Application Firewall (WAF) or an Intrusion Prevention System (IPS) capable of detecting and blocking LDAP injection attempts directed at the login endpoint.

Public Exploit Available: No (There is no confirmed public exploit or weaponized code available in the provided data).

The severity of this LDAP injection vulnerability cannot be overstated, as it provides a direct path for an unauthenticated attacker to bypass administrative access controls. Organizations utilizing OPNsense must prioritize upgrading to version 26.1.6 to ensure the security of their perimeter infrastructure. Failure to patch allows attackers to potentially gain unauthorized administrative control over the network gateway.