Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Apache NiFi could expose data to attackers

published 1 month ago

Summary

The Apache NiFi version 2.10.0‑r8 may let an unauthorized user view information that should be private. The problem is fixed in newer versions of the software. Upgrade Apache NiFi to the latest release as soon as possible.

What to do

Update cleanstart apache-nifi to version 2.10.0-r8.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	apache-nifi	< 2.10.0-r8 Fix: upgrade to 2.10.0-r8

Original advisory text

Security fix for CVE-2026-47845 applied in: apache-nifi 2.10.0-r8

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2026-47845 URL
https://nvd.nist.gov/vuln/detail/CVE-2026-47845 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-HS64071 · OSV

Track software like this

Free during beta