CVE-2026-82806: Apache APISIX: cross-request permission pollution via static permission list mutation
Apache APISIX authz-keycloak can carry one request's permissions into later requests (CVE-2026-82806).
1 stories, newest first · one card per story
Apache APISIX authz-keycloak can carry one request's permissions into later requests (CVE-2026-82806).
Today 1K readers · 1.5K views · 1.1K reads · all time 159K views