CVE-2026-68979

Apache NiFi 1.10.0–2.10.0 exposes a Parameter Context update REST API that does not enforce authorization on components referencing parameter values. An authenticated user with permission to modify a Parameter Context but without component-level authorization could alter parameter values, potenti...