As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-68570: Apache Doris: Authorization bypass leading to unauthorized data access
CVE-2026-68570 is an authorization bypass vulnerability in Apache Doris that allows authenticated users to bypass privilege checks and access unauthorized data. The flaw affects Doris versions 2.0.0 through 2.1.x, 3.0.0 through 3.0.x, 4.0.0 before 4.0.8, and 4.1.0 before 4.1.4. Organizations running affected versions should upgrade to patched releases to prevent unauthorized information disclosure.
Why it matters: Teams running Apache Doris in production need to patch immediately, as authenticated attackers can escalate privileges to read sensitive data without proper authorization.
- Source published
- First seen by Cybersecurity Tracker