Origin Validation Error in Apache XML Graphics Batik
CVE-2026-89326

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Xml Graphics Batik
Vendor
CVE Published:
11 November 2026

What is CVE-2026-89326?

The Apache XML Graphics Batik product suffers from an origin validation error that occurs during the external resource same-origin check. Specifically, it fails to accurately compare the URL protocol, leading to potential security risks for users relying on this functionality. To mitigate this vulnerability, users are advised to upgrade to version 1.20, which addresses this issue.

Affected Version(s)

Apache XML Graphics Batik 0 <= 1.19.0

References

https://lists.apache.org/thread.html/j52wbxhp9wmysor6kdyq...
vendor-advisory
https://issues.apache.org/jira/browse/BATIK-1398
issue-tracking

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.