CVE-2026-31377

An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote attacker to access internal metadata service endpoints. The affected endpoints relied on client-supplied node information for authentication without providing sufficient authentication of the requesting party. Under certain network configurations, a remote attacker may be able to bypass the intended access control and access internal FE metadata interfaces, potentially exposing sensitive cluster information. This issue affects Apache Doris: from 2.0.0 through 2.0.*, from 2.1.0 through 2.1.*, from 3.0.0 through 3.0.*, from 3.1.0 through 3.1.*, from 4.0.0 before 4.0.8, and from 4.1.0 before 4.1.4. Versions 1.2.x and earlier are not affected by this header-trust vulnerability. Users are recommended to upgrade to a fixed release (4.0.8 or 4.1.4), which fixes the issue.

• CWE-287

• https://lists.apache.org/thread/rf4ocqmzxvnwnxpsooj2lkzjl68b1m9q
• https://www.openwall.com/lists/oss-security/2026/09/23/10

Published

Sep 23, 2026

Last Modified

Sep 23, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31354Multiple authenticated stored cross-site scripting (XSS) vul…5.4
• CVE-2026-3136An improper authorization vulnerability in GitHub Trigger Co…9.8
• CVE-2026-31368AiAssistant is affected by type privilege bypass, successful…7.8
• CVE-2026-31369PcManager is affected by type privilege bypass, successful e…3.2
• CVE-2026-3137A security vulnerability has been detected in CodeAstro Food…7.8
• CVE-2026-31370Honor E APP is affected by information leak vulnerability, s…6.3
• CVE-2026-31378Improper Input Validation vulnerability in Apache OFBiz. Th…6.5
• CVE-2026-31379Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2026-3138The Product Filter for WooCommerce by WBW plugin for WordPre…6.5
• CVE-2026-31380Improper Neutralization of Special Elements used in an Expre…6.5
• CVE-2026-31381An attacker can extract user email addresses (PII) exposed i…5.3
• CVE-2026-31382The error_description parameter is vulnerable to Reflected X…6.1