Unrated severityNVD Advisory· Published Jul 29, 2026· Updated Jul 30, 2026
Apache Atlas: Missing Authorization on Admin Endpoints
CVE-2026-50622
Description
Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations.
Affect Version: This issue affects Apache Atlas: from 0.8 through 2.5.0.
Mitigation: Users are recommended to upgrade to version 2.6.0, which fixes the issue.
Affected products
1Patches
Vulnerability mechanics
References
1- lists.apache.org/thread/6r9vs7g5gkp983pwvky781hofdozhgznmitrevendor-advisory
News mentions
0No linked articles in our index yet.