HIGH 8.8 NVD
CVE-2026-50622
Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regar
Description:
Missing Authorization in Apache Atlas.
A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations.
Affect Version:
This issue affects Apache Atlas: from 0.8 through 2.5.0.
Mitigation:
Users are recommended to upgrade to version 2.6.0, which fixes the issue.
References
- https://lists.apache.org/thread/6r9vs7g5gkp983pwvky781hofdozhgzn
- http://www.openwall.com/lists/oss-security/2026/07/29/1
- https://www.openwall.com/lists/oss-security/2026/07/29/1
This high severity vulnerability with a CVSS score of 8.8 was published on 2026-07-29 via NVD.
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.