CVE-2026-82561

Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flow replacement together with versioned flow update and rebase operations. Framework authorization for these methods was...

CVE-2026-81866

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...

CVE-2026-70469

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances of the Content-Encoding header and d...

EUVD-2026-81079

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances of the Content-Encoding header and d...

CVE-2026-70469 Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances of the Content-Encoding header and d...

CVE-2026-70469

Apache NiFi 2.11.0 introduced a security control to reject gzip-encoded HTTP requests to its REST API, but the framework enforcement filter had a flaw: it did not account for multiple Content-Encoding headers or non-standard (e.g., case-variant) gzip identifiers. A malicious client could send cra...

CVE-2026-81866 Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...

CVE-2026-81866

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...

CVE-2026-82561

Apache NiFi versions 1.5.0 through 2.11.0 contain a missing authorization flaw in REST API methods used for Process Group flow replacement and versioned flow update/rebase operations. These methods only checked read/write permissions on the Process Group itself, unlike their asynchronous counterp...

CVE-2026-86089 Apache NiFi: Missing Process Group Authorization for Connector Migration

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access ...

EUVD-2026-81076

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access ...

CVE-2026-86089

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access ...

CVE-2026-87976

Apache NiFi Registry versions 0.4.0 through 2.11.0 are vulnerable to path manipulation in the default file persistence provider. When storing extension bundle content, the provider used group, artifact, and version coordinates from uploaded NAR manifests as filesystem path components without reje...

EUVD-2026-81075

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...

CVE-2026-87976 Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...

CVE-2023-34468

CVE-2023-34468 エクスプロイト 概要 このリポジトリは、Apache NiFi バージョン 0.0.2 から 1.21.0 に存在する重大なリモートコード実行脆弱性（CVSS 9.8）である CVE-2023-34468 向けの Python ベースのエクスプロイトツールを提供します。この脆弱性により、認証済みユーザーが埋め込みトリガーを含む H2 データベース接続文字列を操作して、任意のコードを実行できます。 ⚠️ 警告: 教育目的および許可されたテスト目的のみに使用してください。コンピュータシステムへの不正アクセスは違法です。 脆弱性の詳細 CVE ID:...

CVE-2026-82561: Missing Authorization

Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flow replacement together with versioned flow update and rebase operations. Framework authorization for these methods was...

CVE-2023-34212

CVE-2023-34212: Apache NiFi の JNDI コンポーネントを介した Java デシリアライゼーション Apache NiFi 1.8.0 から 1.21.0 において、JndiJmsConnectionFactoryProvider コントローラサービス、ならびに ConsumeJMS および PublishJMS プロセッサにより、認証され権限が与えられたユーザーが、リモートロケーションからの信頼できないデータのデシリアライゼーションを可能にする URL およびライブラリプロパティを設定できます。 ベンダー開示:...

CVE-2023-34468-POC

CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Apache NiFi = 1.21.0 における H2 データベース RUNSCRIPT を介したリモートコード実行 脆弱性 Apache NiFi にはデフォルトで H2 データベース JAR が同梱されています。DBCPConnectionPool コントローラサービスを構成してこの H2 ドライバを使用できます。H2 は RUNSCRIPT ステートメントをサポートしており、リモート URL から SQL ファイルを取得して実行します。その SQL ファイルは CREATE ALIAS...

CVE-2023-40037

CVE-2023-40037: Apache NiFi における JDBC および JNDI 接続 URL の不完全な検証 Apache NiFi 1.21.0 から 1.23.0 は、複数の Processor および Controller Service において JDBC および JNDI JMS アクセスをサポートしていますが、その接続 URL 検証は巧妙に細工された入力に対して十分な保護を提供していません。認証済みかつ承認済みのユーザーは、カスタム入力フォーマットを使用して接続 URL 検証をバイパスできます。この修正は、接続 URL...