Missing Authorization Vulnerability in Apache Atlas by Apache

CVE-2026-50622

What is CVE-2026-50622?

A security flaw has been identified in Apache Atlas involving a missing authorization mechanism within its administrative endpoints. This vulnerability allows any authenticated user, irrespective of their designated role, to execute administrative functions, potentially compromising the integrity and security of the system. It is recommended that users upgrade to version 2.6.0 to address this issue and enhance their security posture.

References