---
id: "CVE-2026-121023"
kind: "vulnerability"
aliases: ["CVE-2026-121023"]
title: "AxxonNet ARP Agent: LDAP service account password written to logs"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["axxonnet", "infrastructure", "ldap", "linux", "windows"]
not_affected_if: ["no-arp-agent", "version-3.25.0-or-later"]
published_at: "2026-11-03T09:17:12+00:00"
first_seen_at: "2026-11-03T09:19:51+00:00"
updated_at: "2026-11-03T09:20:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121023", "first_seen_at": "2026-11-03T09:19:51+00:00"}]
---

# AxxonNet ARP Agent: LDAP service account password written to logs

The ARP Agent component of AxxonSoft AxxonNet before 3.25.0 writes serialized user synchronization data, including the plaintext password of its LDAP directory service account, into WARNING-level log entries. A local attacker who can read those log files or support packages can recover that LDAP account password.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed AxxonNet version and confirm whether it is below `3.25.0`.
- Confirm whether the ARP Agent is in use on Windows or Linux hosts.
- Review ARP Agent log files and support packages for WARNING entries containing serialized user synchronization data (unknown exact string in the sources).

## Fix

- AxxonNet: move to `3.25.0` or later (per the NVD description; the sources do not name the exact fixed build beyond this).

## Timeline

- 2026-11-03T09:19:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121023

## From the sources

Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local attacker with read access to ARP Agent log files or support packages to obtain the plaintext password of the LDAP directory service account via WARNING-level log entries that contain serialized user synchronization data.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_