CVE-2026-62354

CVE-2026-62354 affects Apache NiFi 1.10.0–2.10.0. The issue is an authorization flaw in handling Parameter Context validation requests: users with READ access can submit proposed Parameter values, allowing them to override current configuration and invoke component validation methods with alterna...