CVE-2026-111242

Apache TomEE is vulnerable to privilege escalation when using MicroProfile JWT authentication for servlets that declare a run-as identity . The root cause is that the security state from a request is not consistently cleared from the processing thread if a request fails to complete normally. This...