CNVD-2026-12894

Vulnerability from cnvd - Published: 2026-03-04
VLAI
Title
Apache Druid认证绕过漏洞
Description
Apache Druid是美国阿帕奇（Apache）基金会的一款使用Java语言编写的、面向列的开源分布式数据库。 Apache Druid存在安全漏洞，该漏洞源于LDAP身份验证响应验证不当，可能导致身份验证绕过。攻击者可利用该漏洞仅通过提供存在的用户名和空密码即可绕过身份验证，未经授权访问Druid集群、查询敏感数据、执行数据操作，若目标账户具有管理员权限还可完全控制Druid部署，对系统的机密性、完整性和可用性构成严重威胁。
Severity
高
Patch Name
Apache Druid认证绕过漏洞的补丁
Patch Description
Apache Druid是美国阿帕奇（Apache）基金会的一款使用Java语言编写的、面向列的开源分布式数据库。 Apache Druid存在安全漏洞，该漏洞源于LDAP身份验证响应验证不当，可能导致身份验证绕过。攻击者可利用该漏洞仅通过提供存在的用户名和空密码即可绕过身份验证，未经授权访问Druid集群、查询敏感数据、执行数据操作，若目标账户具有管理员权限还可完全控制Druid部署，对系统的机密性、完整性和可用性构成严重威胁。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序，请及时关注更新: https://lists.apache.org/thread/2x9rv3kv6t1p577lvq4z0rl0zlt9g4sr

Reference
https://nvd.nist.gov/vuln/detail/CVE-2026-23906
Impacted products
Name
Apache Druid >=0.17.0，<36.0.0
Show details on source website
To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-23906",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-23906"
    }
  },
  "description": "Apache Druid\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u57fa\u91d1\u4f1a\u7684\u4e00\u6b3e\u4f7f\u7528Java\u8bed\u8a00\u7f16\u5199\u7684\u3001\u9762\u5411\u5217\u7684\u5f00\u6e90\u5206\u5e03\u5f0f\u6570\u636e\u5e93\u3002\n\nApache Druid\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eLDAP\u8eab\u4efd\u9a8c\u8bc1\u54cd\u5e94\u9a8c\u8bc1\u4e0d\u5f53\uff0c\u53ef\u80fd\u5bfc\u81f4\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4ec5\u901a\u8fc7\u63d0\u4f9b\u5b58\u5728\u7684\u7528\u6237\u540d\u548c\u7a7a\u5bc6\u7801\u5373\u53ef\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\uff0c\u672a\u7ecf\u6388\u6743\u8bbf\u95eeDruid\u96c6\u7fa4\u3001\u67e5\u8be2\u654f\u611f\u6570\u636e\u3001\u6267\u884c\u6570\u636e\u64cd\u4f5c\uff0c\u82e5\u76ee\u6807\u8d26\u6237\u5177\u6709\u7ba1\u7406\u5458\u6743\u9650\u8fd8\u53ef\u5b8c\u5168\u63a7\u5236Druid\u90e8\u7f72\uff0c\u5bf9\u7cfb\u7edf\u7684\u673a\u5bc6\u6027\u3001\u5b8c\u6574\u6027\u548c\u53ef\u7528\u6027\u6784\u6210\u4e25\u91cd\u5a01\u80c1\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0:\r\nhttps://lists.apache.org/thread/2x9rv3kv6t1p577lvq4z0rl0zlt9g4sr",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2026-12894",
  "openTime": "2026-03-04",
  "patchDescription": "Apache Druid\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u57fa\u91d1\u4f1a\u7684\u4e00\u6b3e\u4f7f\u7528Java\u8bed\u8a00\u7f16\u5199\u7684\u3001\u9762\u5411\u5217\u7684\u5f00\u6e90\u5206\u5e03\u5f0f\u6570\u636e\u5e93\u3002\r\n\r\nApache Druid\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eLDAP\u8eab\u4efd\u9a8c\u8bc1\u54cd\u5e94\u9a8c\u8bc1\u4e0d\u5f53\uff0c\u53ef\u80fd\u5bfc\u81f4\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4ec5\u901a\u8fc7\u63d0\u4f9b\u5b58\u5728\u7684\u7528\u6237\u540d\u548c\u7a7a\u5bc6\u7801\u5373\u53ef\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\uff0c\u672a\u7ecf\u6388\u6743\u8bbf\u95eeDruid\u96c6\u7fa4\u3001\u67e5\u8be2\u654f\u611f\u6570\u636e\u3001\u6267\u884c\u6570\u636e\u64cd\u4f5c\uff0c\u82e5\u76ee\u6807\u8d26\u6237\u5177\u6709\u7ba1\u7406\u5458\u6743\u9650\u8fd8\u53ef\u5b8c\u5168\u63a7\u5236Druid\u90e8\u7f72\uff0c\u5bf9\u7cfb\u7edf\u7684\u673a\u5bc6\u6027\u3001\u5b8c\u6574\u6027\u548c\u53ef\u7528\u6027\u6784\u6210\u4e25\u91cd\u5a01\u80c1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Apache Druid\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Apache Druid \u003e=0.17.0\uff0c\u003c36.0.0"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2026-23906",
  "serverity": "\u9ad8",
  "submitTime": "2026-02-13",
  "title": "Apache Druid\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.