CVE-2026-50622 — Apache Atlas: Missing Authorization on Admin Endpoints

Description (CNA)

Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations. Affect Version: This issue affects Apache Atlas: from 0.8 through 2.5.0. Mitigation: Users are recommended to upgrade to version 2.6.0, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Atlas	affected 0.8.0 through 2.5.0

CWE

CWE-862

References

https://lists.apache.org/thread/6r9vs7g5gkp983pwvky781hofdozhgzn

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/07/29/1

CISA-ADP

No English description supplied.

No references supplied.