92 matches found
CVE-2026-105935
A flaw was found in Apache Pulsar's Functions Worker. An authenticated user with permissions to manage functions can publish unauthorized messages to restricted topics, compromising message integrity. This issue occurs because the function trigger application programming interface API endpoint do...
CVE-2026-105930
A flaw was found in Apache Pulsar's Functions worker. When package management is enabled, the worker authorizes package URL requests using its own internal credentials rather than validating the permissions of the requesting user. An authenticated attacker can exploit this flaw by specifying a...
CVE-2026-105935
The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Functions Worker performs this publish with its own broker client, which authenticates with the Worker's configured...
CVE-2026-105942 Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalation
When a configured proxy role sends a request to the broker on behalf of another user the original principal, the broker is designed to authorize both the proxy role and the original principal and to allow the request only if both are authorized, so that the original principal cannot exceed its ow...
org.apache.pulsar:pulsar-broker (>=4.2.0, <=4.2.4), org.apache.pulsar:pulsar-broker-auth-athenz (>=4.2.0, <=4.2.4) +3 more potentially affected by CVE-2026-105936 via org.apache.pulsar:pulsar-functions-worker (>=4.2.0, <=4.2.4)
org.apache.pulsar:pulsar-functions-worker MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.4 Source cves: CVE-2026-105936 Source advisory: MEND:CVE-2026-105936...
CVE-2026-105936 Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpoint
The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on the functions worker: the worker connectors endpoint /admin/v2/worker/connectors and the deprecated functions connectors endpoint /admin/v2/functions/connectors and...
com.datastax.oss:kafka-0-10 (4.0.3.8), com.datastax.oss:kafka-0-9 (4.0.3.8) +15 more potentially affected by CVE-2026-105936 via org.apache.pulsar:pulsar-functions-worker (>=4.0.0, <=4.0.13)
org.apache.pulsar:pulsar-functions-worker MAVEN version =4.0.0, =8.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.13 and more Source cves: CVE-2026-105936 Source advisory: MEND:CVE-2026-105936...
com.datastax.oss:kafka-0-10 (4.0.3.8), com.datastax.oss:kafka-0-9 (4.0.3.8) +15 more potentially affected by CVE-2026-105935 via org.apache.pulsar:pulsar-functions-worker (>=4.0.0, <=4.0.13)
org.apache.pulsar:pulsar-functions-worker MAVEN version =4.0.0, =8.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.13 and more Source cves: CVE-2026-105935 Source advisory: MEND:CVE-2026-105935...
CVE-2026-105935 Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission
The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Functions Worker performs this publish with its own broker client, which authenticates with the Worker's configured...
CVE-2026-105935 Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission
The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Functions Worker performs this publish with its own broker client, which authenticates with the Worker's configured...
EUVD-2026-107472
The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Functions Worker performs this publish with its own broker client, which authenticates with the Worker's configured...
org.apache.pulsar:pulsar-broker (>=4.2.0, <=4.2.4), org.apache.pulsar:pulsar-broker-auth-athenz (>=4.2.0, <=4.2.4) +3 more potentially affected by CVE-2026-105935 via org.apache.pulsar:pulsar-functions-worker (>=4.2.0, <=4.2.4)
org.apache.pulsar:pulsar-functions-worker MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.4 Source cves: CVE-2026-105935 Source advisory: MEND:CVE-2026-105935...
CVE-2026-105935
The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Functions Worker performs this publish with its own broker client, which authenticates with the Worker's configured...
CVE-2026-105935
The Apache Pulsar Functions Worker contains a vulnerability where a REST API endpoint for triggering functions publishes caller-supplied values to input topics without verifying if the caller has produce permissions for those specific topics. The worker uses its own broker-client credentials for ...
com.datastax.oss:kafka-0-10 (4.0.3.8), com.datastax.oss:kafka-0-9 (4.0.3.8) +15 more potentially affected by CVE-2026-105930 via org.apache.pulsar:pulsar-functions-worker (>=4.0.0, <=4.0.13)
org.apache.pulsar:pulsar-functions-worker MAVEN version =4.0.0, =8.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.13 and more Source cves: CVE-2026-105930 Source advisory: MEND:CVE-2026-105930...
org.apache.pulsar:pulsar-broker (>=4.2.0, <=4.2.4), org.apache.pulsar:pulsar-broker-auth-athenz (>=4.2.0, <=4.2.4) +3 more potentially affected by CVE-2026-105930 via org.apache.pulsar:pulsar-functions-worker (>=4.2.0, <=4.2.4)
org.apache.pulsar:pulsar-functions-worker MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.4 Source cves: CVE-2026-105930 Source advisory: MEND:CVE-2026-105930...
Apache Pulsar authorization issue vulnerability
Versions of Apache Pulsar from 2.0.0-rc1-incubating up to 4.0.14 and from 4.1.0 up to 4.2.5 contain an authorization issue vulnerability. This vulnerability arises because the Functions Worker triggers function endpoints that fail to verify whether the caller has the necessary permissions to...
PT-2026-120755
The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Functions Worker performs this publish with its own broker client, which authenticates with the Worker's configured...
Apache Pulsar authorization issue vulnerability
Vulnerabilities related to authorization issues exist in Apache Pulsar versions from 2.8.0 up to and including 4.0.14, from 4.1.0 up to and including 4.1.3, and from 4.2.0 up to and including 4.2.5. This vulnerability arises because when package management is enabled, the Pulsar Functions worker...