CVE-2026-105869 | Apache Pulsar up to 4.0.13/4.2.4 MultiRolesTokenAuthorizationProvider improper authentication

October 21, 2026 Yanac

A vulnerability was found in Apache Pulsar up to 4.0.13/4.2.4. It has been declared as very critical. This issue affects some unknown processing of the component MultiRolesTokenAuthorizationProvider. Such manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-105869. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More