VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Jul 14, 2026· Updated Jul 14, 2026

CVE-2026-58319

CVE-2026-58319

Description

Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication. An unauthenticated attacker with network access to the FE HTTP service could perform unauthorized administrative operations, potentially affecting cluster integrity and availability and leading to cluster instability or denial of service.

This issue affects Apache Doris versions prior to 3.1.0. Users are advised to upgrade to Apache Doris 3.1.0 or later.

Affected products

2
  • Apache/Doris2 versions
    cpe:2.3:a:apache:doris:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apache:doris:*:*:*:*:*:*:*:*range: <3.1.0
    • (no CPE)range: <3.1.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.