CVE-2026-40606

The CVE affects mitmproxy (and mitmweb as its web interface) where, in versions 12.2.1 and below, the built-in LDAP proxyauth authentication does not sanitize the username correctly when querying the LDAP server. This allows a malicious client to bypass authentication, but only for instances usin...