Back Cybersecuritynews

Apache NiFi Vulnerability Enables Authorization Bypass

Cybersecuritynews •Abinaya • February 17, 2026

A newly disclosed high-severity vulnerability in Apache NiFi exposes systems to an authorization bypass that could allow lower-privileged users to modify restricted components. Tracked as CVE-2026-25903, the flaw impacts Apache NiFi versions 1.1.0 through 2.7.2 and has been fixed in version 2.8.0. According to the Apache NiFi security advisory, the issue arises from missing authorization checks when updating configuration properties of […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apache NiFi Vulnerability CVE-2026-25903 Allows Authorization Bypass A high-severity vulnerability in Apache NiFi, tracked as CVE-2026-25903, has been disclosed, allowing lower-privileged users to modify restricted components. This flaw affects Apache NiFi versions 1.1.0 through 2.7.2 and has been addressed in version 2.8.0. Users are urged to upgrade to mitigate potential security risks. 2 sources 46

Extracted Entities

CVEs (1)

CVE-2026-25903

Platforms (1)

Apache NiFi