CVE-2026-31377: Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service
CVE-2026-31377 lets unauthenticated attackers reach the Apache Doris Frontend meta service; CVSS score is 7.5.
Stories per day · 30 days
3 RSS
3 stories, newest first · one card per story
Stories tagged #apache-doris
CVE-2026-72524: Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables
Apache Doris authorization bypass CVE-2026-72524 lets authenticated low-privilege users read, write, or drop arbitrary tables in affected 3.1.x through 4.1.3 versions.
CVE-2026-68570: Apache Doris: Authorization bypass leading to unauthorized data access
Apache Doris authorization bypass CVE-2026-68570 lets authenticated users read unauthorized data, disclosing information across versions 2.0.0 through 4.1.3.