Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)
cve-program · CVE-2026-41869
PublishedMissing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (Nutch REST API). This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which removes the Nutch Server. If an upgrade is not possible, user must restrict access to instances running the Nutch Service to trusted users only. Please, also visit the Apache Nutch security advisories https://nutch.apache.org/documentation/security/ .
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-41869 · CVE overview and exploitation status
cve-program · CVE-2026-41869
Related changes
Linked by CVE identifierNo related changes are available here.