CVE-2026-96443 — Apache Doris: JDBC driver URL validation bypass leads to remote code execution

CVE-2026-96443

Apache Doris: JDBC driver URL validation bypass leads to remote code execution PUBLISHED

Description (CNA)

Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.

Vendor / product	Versions
Apache Software Foundation / Apache Doris	affected 2.0.5 through 4.1.3

CWE-829

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.