---
id: "CVE-2026-121021"
kind: "vulnerability"
aliases: ["CVE-2026-121021"]
title: "AxxonSoft Axxon One: LDAP service account password stored in plaintext config"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["axxon-one", "ldap", "linux", "vendor", "windows"]
not_affected_if: ["no-ldap-integration", "version-3.1.0-or-later"]
published_at: "2026-11-03T09:17:11+00:00"
first_seen_at: "2026-11-03T09:19:51+00:00"
updated_at: "2026-11-03T09:20:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121021", "first_seen_at": "2026-11-03T09:19:51+00:00"}]
---

# AxxonSoft Axxon One: LDAP service account password stored in plaintext config

Axxon One before 3.1.0 stores the password of its LDAP directory service account in plaintext in the main.conf file of the SecurityManager shared configuration. A local attacker who can read that configuration directory or its backups can recover the LDAP account password.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Axxon One version and confirm whether it is earlier than `3.1.0`
- Look for `main.conf` in the SecurityManager shared configuration directory and in any configuration backups, and check whether an LDAP password appears in plaintext

## Fix

- Move to Axxon One `3.1.0` or later, per the NVD description (before 3.1.0 is affected)

## Timeline

- 2026-11-03T09:19:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121021

## From the sources

Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service account via the main.conf configuration file.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_