Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache NiFi Registry

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-87976

    Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles

    Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem p…

    Apache Software Foundation Apache NiFi Registry
  • High 8.8
    CVE-2022-33140 Public exploit

    Improper Neutralization of Command Elements in Shell User Group Provider

    The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUs…

    Apache Software Foundation Apache NiFi Apache NiFi Registry org.apache.nifi:nifi Maven