Buffer Overflow Vulnerability in Apache Lucy

CVE-2026-61486

What is CVE-2026-61486?

A stack-based buffer overflow vulnerability has been identified in Apache Lucy, affecting all available versions of the product. As Apache Lucy is a retired project, no updates or patches will be issued to address this issue. Users are strongly advised to either transition to alternative solutions or implement stringent access controls to guard against potential exploitation of this vulnerability.

References