Beveiligingsadvies

CVE-2026-72524

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-14 09:58:50
Laatst bijgewerkt 2026-09-14 19:37:24
Toegewezen door apache
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access or modify data they are not authorized to. This issue affects Apache Doris: from 3.1.0 through 3.1.*, from 4.0.0 through 4.0.7, and from 4.1.0 through 4.1.3. Users are recommended to upgrade to a fixed release (4.0.8 or 4.1.4), which fixes the issue.