High · 8.1 CVE-2026-79633 EUVD-2026-104163GHSA-c9rx-95m5-mr25

Apache Answer: Missing Authorization Allows Mutations of Non-Public Content

Published Oct 19, 2026 · Updated Nov 3, 2026 · Assigned by apache

Description

vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.2.

Missing authorization checks allowed authenticated users to perform actions on non-public content they were not permitted to access.

Users are recommended to upgrade to version 2.0.3, which fixes the issue.

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache Answer	≤ 2.0.2	—