Critical · 9.1 CVE-2024-27349 EUVD-2024-1128GHSA-6mgp-p75r-vhjm

Apache HugeGraph-Server: Bypass whitelist in Auth mode

Published Apr 22, 2024 · Updated Aug 21, 2025 · Assigned by apache

Description

Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache HugeGraph-Server	1.0.0 – < 1.3.0	1.3.0

Ecosystem	Package	Affected	Fixed	Record
Maven	org.apache.hugegraph:hugegraph-api	>= 1.0.0, < 1.3.0	1.3.0	GHSA-6mgp-p75r-vhjm