Not rated
CVE-2026-96443 Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution…
Description
Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Doris 2.0 | 2.0.5 → 4.1.3 | No fix stated |
References
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Doris
The 10 CVEs of Apache Doris →
CVE-2026-31377
An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote…
7.5
High
CVE-2026-68570
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access…
Not rated
CVE-2026-72524
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access…
Not rated
CVE-2026-58319
Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication
Not rated