The vulnerability is a LDAP filter injection flaw that allows an attacker who already holds valid LDAP credentials to subvert group membership verification. By crafting a specially‑formatted LDAP query, an attacker can make the database treat the user as a member of privileged groups, granting them unauthorized access to sensitive data. The weakness is mapped to CWE‑280, indicating a flaw in privilege‑management or access control logic. The direct impact is the potential acquisition of read or write privileges beyond those intended for the authenticated user, exposing confidential information or enabling further malicious activity within the database.

Yandex Database instances from the Yandex vendor, specifically any release earlier than version 25.3.1.25. No other affected versions are listed, so upgrading to the 25.3.1.25 release or later is sufficient to remove the flaw.

The CVSS score of 5.3 indicates a medium severity risk. The EPSS score is not available, so while we cannot quantify current exploitation probability, the presence of LDAP injection and privilege escalation raises concern for environments that rely on LDAP for authentication. The vulnerability is not listed as a Known Exploited Vulnerability (KEV) by CISA, yet the attack vector requires an attacker to possess valid LDAP credentials and be able to communicate with the Yandex Database service remotely. If these conditions are met, the flaw can be exploited without needing local access or administrative privilege on the database host.