CVE-2026-82561

Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flow replacement together with versioned flow update and rebase operations. Framework authorization for these methods was...

PT-2026-93931

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.5.0 through 2.11.0 Description Certain REST API methods used for replacing Process Group contents, versioned flow updates, and rebase operations lack sufficient authorization checks. While asynchronous update methods...