Missing Authentication Vulnerability in Apache Ranger by Apache
CVE-2026-55814

Currently unrated

Key Information:

Vendor: Apache
Status: Apache Ranger
Vendor: CVE Published:; 10 August 2026

What is CVE-2026-55814?

The missing authentication vulnerability in Apache Ranger's Download APIs allows unauthorized users to access protected resources. This issue affects all versions up to 2.8.0 and has been addressed in version 2.9.0, which users are strongly encouraged to upgrade to in order to mitigate potential security risks.

Affected Version(s)

Apache Ranger 0 <= 2.8.0

References

https://lists.apache.org/thread/yoorhnbxfydb5xoxlxlmms0f2...

vendor-advisory

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 10, 2026
Vulnerability Reserved
Jun 17, 2026

Credit

Andrew Rukin (Arenadata)

CVE-2026-55814 Data

JSON