Insecure Permissions Vulnerability in Apache XML Graphics FOP

CVE-2026-126627

What is CVE-2026-126627?

A vulnerability exists in Apache XML Graphics FOP where temporary files are created with insecure permissions. This flaw could potentially allow unauthorized access to sensitive information by exposing these files to unintended users. The affected versions of this software up to 2.11 are impacted. Users are strongly advised to upgrade to version 2.12, which addresses this issue by ensuring that temporary files are created with secure permissions, thus enhancing the overall security of the application.

References