Authentication Bypass Vulnerability in Apache HugeGraph-Server

Summary

An authentication bypass vulnerability has been identified in Apache HugeGraph-Server, affecting versions from 1.0.0 up to but not including 1.5.0. This security issue arises from an improper handling of assumed-immutable data, which may allow an attacker to gain unauthorized access. It is critical for users operating vulnerable versions of the HugeGraph-Server to upgrade to version 1.5.0, where this vulnerability has been addressed. Failure to update may expose systems to potential exploitation.

References