CVE-2026-22022 Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components. Only deployments that meet all of the following criteria ar...

CVE-2026-22022

Apache Solr versions 5.3.0 through 9.10.0 are vulnerable to unauthorized access to certain Solr APIs due to insufficiently strict input validation in the RuleBasedAuthorizationPlugin . This vulnerability specifically impacts deployments that use this plugin with multiple roles, specific pre-defin...