Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Apache Superset may allow unauthorized data access

published 5 days ago
Summary

The Apache Superset software you run could let someone view or change data they shouldn’t. The problem is fixed in newer versions, so updating to the latest release will protect your system.

What to do
  • Update cleanstart apache-superset to version 6.1.0-r7.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart apache-superset < 6.1.0-r7
Fix: upgrade to 6.1.0-r7
Original advisory text
Security fix for CVE-2026-112899 applied in: apache-superset 6.1.0-r7
Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.8 High
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-OE45569 · OSV
Track software like this
Free during beta