Vulnerability in Apache Answer Affects Email Workflow Security
CVE-2026-67249

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Answer
Vendor
CVE Published:
19 October 2026

What is CVE-2026-67249?

A security flaw in Apache Answer allows for a verification code issued for one email-based workflow to be improperly accepted by another sensitive workflow. This occurs because there is a lack of proper enforcement regarding the intended purpose of the verification code. To mitigate this vulnerability, users are strongly encouraged to upgrade to version 2.0.3, which addresses the underlying issue.

Affected Version(s)

Apache Answer 0 <= 2.0.2

References

https://lists.apache.org/thread/kbdgj9vzd24zb4r2d9ydqyr6f...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Arpit Jain
.