CVE-2026-105935

A flaw was found in Apache Pulsar's Functions Worker. An authenticated user with permissions to manage functions can publish unauthorized messages to restricted topics, compromising message integrity. This issue occurs because the function trigger application programming interface API endpoint do...