CVE-2026-58319

Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication. An unauthenticated attacker with network access to the FE HTTP service could perform unauthorized administrative operations, potentially affecting cluster integrity and availability and leading to cluster instability or denial of service. This issue affects Apache Doris versions prior to 3.1.0. Users are advised to upgrade to Apache Doris 3.1.0 or later.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://lists.apache.org/thread/cob5mxkyr1k81o8v91hox2hld6zh25b4	Mailing List Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/07/14/3	Mailing List Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:doris:*:*:*:*:*:*:*:*

History

24 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Ciertas APIs administrativas REST HTTP de Apache Doris FE eran accesibles sin la autenticación adecuada. Un atacante no autenticado con acceso de red al servicio HTTP de FE podría realizar operaciones administrativas no autorizadas, afectando potencialmente la integridad y disponibilidad del clúster y provocando inestabilidad del clúster o denegación de servicio. Este problema afecta a las versiones de Apache Doris anteriores a la 3.1.0. Se aconseja a los usuarios actualizar a Apache Doris 3.1.0 o posterior.

Information

Published : 2026-07-14 10:16

Updated : 2026-10-24 21:10

NVD link : CVE-2026-58319

Mitre link : CVE-2026-58319

CVE.ORG link : CVE-2026-58319

JSON object : View

Products Affected

apache

doris

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2026-58319", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-58319", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-14T15:57:56.773292Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@apache.org", "affectedData": [{"vendor": "Apache Software Foundation", "product": "Apache Doris", "versions": [{"status": "affected", "version": "2.1.0", "lessThan": "3.1.0", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-14T10:16:33.430", "references": [{"url": "https://lists.apache.org/thread/cob5mxkyr1k81o8v91hox2hld6zh25b4", "tags": ["Mailing List", "Vendor Advisory"], "source": "security@apache.org"}, {"url": "http://www.openwall.com/lists/oss-security/2026/07/14/3", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@apache.org", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication. An unauthenticated attacker with network access to the FE HTTP service could perform unauthorized administrative operations, potentially affecting cluster integrity and availability and leading to cluster instability or denial of service. \n\nThis issue affects Apache Doris versions prior to 3.1.0. Users are advised to upgrade to Apache Doris 3.1.0 or later."}, {"lang": "es", "value": "Ciertas APIs administrativas REST HTTP de Apache Doris FE eran accesibles sin la autenticaci\u00f3n adecuada. Un atacante no autenticado con acceso de red al servicio HTTP de FE podr\u00eda realizar operaciones administrativas no autorizadas, afectando potencialmente la integridad y disponibilidad del cl\u00faster y provocando inestabilidad del cl\u00faster o denegaci\u00f3n de servicio.\n\nEste problema afecta a las versiones de Apache Doris anteriores a la 3.1.0. Se aconseja a los usuarios actualizar a Apache Doris 3.1.0 o posterior."}], "lastModified": "2026-10-24T21:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:doris:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2FEAD96-4575-4F07-826A-BE03E140AA28", "versionEndExcluding": "3.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}