As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-119641: Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownership
CVE-2026-119641 is an improper input validation vulnerability in Apache Oozie affecting all versions. An authenticated user can reconfigure another tenant's workflow job and reassign its ownership, bypassing per-job access controls. The project is retired, and no fix is planned.
Why it matters: Organizations running Apache Oozie face privilege escalation risk from authenticated users changing workflow ownership and configuration; users should migrate to actively maintained alternatives.
- Source published
- First seen by Cybersecurity Tracker