Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Doris

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-31377

    Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service

    An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote attacker to access internal metadata service endpoints. The affected endpoints relied on client-supplied node information for authenticati…

    Apache Software Foundation Apache Doris
  • High 8.8
    CVE-2026-72524

    Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables

    Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access or modify data they are not authorized to. This issue affects Apache Doris: from 3.1.0 through 3.1.*, from 4.0.0 through 4.0.7, and from 4…

    Apache Software Foundation Apache Doris