CVE-2026-86089

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration…

Nifi

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access to the Process Groups involved. The absence of Process Group authorization allowed an authenticated user with read access to a Connector to enumerate the identifiers, names, and flow…

16. Sep 2026

Ausgewertete Quellen

• Hersteller
  https://lists.apache.org/thread/lnpqnn61k62fkgxqd9cftf7sr77jhrk1
• Hinweis
  http://www.openwall.com/lists/oss-security/2026/09/16/10
• NVD
  CVE-2026-86089