Incorrect Authorization

org.apache.pulsar is vulnerable to Incorrect Authorization. The vulnerability exists because the worker incorrectly performs authorization by using the proxy’s role for authorization instead of the client’s role when a client connects to the Pulsar function worker via a Pulsar Proxy, which can result in privilege escalation.