Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-65945 EUVD-2026-55246GHSA-c3hc-q36q-95g4

Apache Ranger: Logs contain replayable JWT bearer tokens

Published Aug 10, 2026 · Updated Aug 10, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Ranger

Description

Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0
Users are recommended to upgrade to version 2.9.0, which fixes this issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Ranger ≤ 2.8.0 —

References