[oss-security] CVE-2026-40920: Apache Ranger: Privilege Escalation via URL Parameter

Sat, 08 Aug 2026 21:36:14 -0700 

Severity: important 

Affected versions:

- Apache Ranger through 2.8.0

Description:

Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 
2.8.0.

Users are recommended to upgrade to version [FIXED_VERSION], which fixes this 
issue.

Credit:

Andrew Rukin (Arenadata) (finder)

References:

https://ranger.apache.org/
https://www.cve.org/CVERecord?id=CVE-2026-40920

Reply via email to