CVE-2026-49326

Apache HBase is vulnerable to a Missing Authorization flaw in its thrift and rest delegation services, specifically within the ScannerInstanceResource and HBaseServiceHandler components. The root cause is the failure to verify that a user owns a scanner instance during fetch or close operations a...