CVE-2026-44911

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.15.0 through 2.9.0

Description Authorization handling for component configuration verification requests allows clients with read access to submit proposed configuration properties. These proposed properties override the current configuration, enabling users with read access to invoke predefined verification methods using alternative settings. This issue does not affect installations that do not implement different authorization levels for viewing and modifying component configurations.

Recommendations Upgrade to version 2.10.0.