Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-31377

Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service

CVSS 3.1 7.5 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-31377

Published

An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote attacker to access internal metadata service endpoints. The affected endpoints relied on client-supplied node information for authentication without providing sufficient authentication of the requesting party. Under certain network configurations, a remote attacker may be able to bypass the intended access control and access internal FE metadata interfaces, potentially exposing sensitive cluster information. This issue affects Apache Doris: from 2.0.0 through 2.0.*, from 2.1.0 through 2.1.*, from 3.0.0 through 3.0.*, from 3.1.0 through 3.1.*, from 4.0.0 before 4.0.8, and from 4.1.0 before 4.1.4. Versions 1.2.x and earlier are not affected by this header-trust vulnerability. Users are recommended to upgrade to a fixed release (4.0.8 or 4.1.4), which fixes the issue.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-31377

Published

Apache Doris

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Apache Software Foundation",
                    "product": "Apache Doris",
                    "modules": [
                        "Frontend (FE) meta service"
                    ],
                    "programFiles": [
                        "fe/fe-core/src/main/java/org/apache/doris/httpv2/meta/MetaService.java"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "2.0.0",
                            "lessThan": "4.0.8",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "4.1.0",
                            "lessThan": "4.1.4",
                            "versionType": "semver"
                        },
                        {
                            "status": "unaffected",
                            "version": "0",
                            "lessThan": "2.0.0",
                            "versionType": "semver"
                        },
                        {
                            "status": "unaffected",
                            "version": "4.0.8",
                            "lessThan": "4.1.0",
                            "versionType": "semver"
                        },
                        {
                            "status": "unaffected",
                            "version": "4.1.4",
                            "lessThan": "*",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Original source record · Cite this exact observation · Complete original publisher JSON