VulnSocial

CVE-2026-50622Discl(apache / atlas)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch apache atlas systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations. Affect Version: This issue affects Apache Atlas: from 0.8 through 2.5.0. Mitigation: Users are recommended to upgrade to version 2.6.0, which fixes the issue.

apache CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • atlas

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Discl: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
apache
Products
atlas

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-29: 2Patch / Workaround · 2026-07-29: 1Technical Details · 2026-07-29: 207-29
Signal classification2 categories
Discl
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Upwind Security MDR@UpwindMDR
    Patch

    🚨High - Apache Atlas Admin Endpoint Authorization Bypass (CVE-2026-50622) Apache Atlas org.apache.atlas:atlas-webapp has missing authorization checks on admin REST endpoints, allowing any authenticated user to invoke administrative operations regardless of assigned role. Exploitation is via direct calls to the /api/atlas/admin/* endpoints, leading to privilege escalation and full admin control. 👉Affected: Apache Atlas (org.apache.atlas:atlas-webapp) 0.8 - 2.5.0 | Upgrade to 2.6.0

    Post summary

    Apache Atlas suffers a high‑severity authorization bypass (CVE‑2026‑50622) allowing authenticated users to perform admin operations; upgrading to version 2.6.0 resolves the vulnerability.

    0100080
    274 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Discl

    CVE-2026-50622 Missing Authorization in Apache Atlas 0.8 Through 2.5.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-50622

    Post summary

    The CVE-2026-50622 describes a missing authorization vulnerability in Apache Atlas 0.8‑2.5.0, with no further details on exploitation or remediation.

    0000078
    4.1K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapacheatlas---

Explore more

Back to dashboardapache CVEsatlas vulnerabilities