OAuth 1 Rebinding Vulnerability in Apache Allura by Apache

CVE-2026-118196

What is CVE-2026-118196?

An OAuth 1 rebinding vulnerability exists in Apache Allura that may allow unauthorized access to sensitive information. This issue affects all versions of Apache Allura up to 1.22.0, allowing attackers to exploit the flaw unless users upgrade to version 1.22.1, which addresses the vulnerability. It is crucial for users to implement this upgrade to ensure the security of their applications and safeguard against potential attacks.

References