Improper Input Validation in Apache Oozie by Apache
CVE-2026-119641

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Oozie
Vendor
CVE Published:
3 November 2026

What is CVE-2026-119641?

An improper input validation vulnerability in Apache Oozie allows an authenticated user to reconfigure another tenant's workflow job and alter its ownership. This issue exists across all versions of Apache Oozie. As Apache Oozie is a retired project, no updates or patches will be provided for this vulnerability. Users are strongly advised to limit access to their instances to ensure that only trusted users can interact with the system or to seek alternative solutions.

Affected Version(s)

Apache Oozie 0

References

https://lists.apache.org/thread.html/b0vh3rxt3dbdvyz44210...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Hari (Harikrishna KP)
.