CVE-2026-105932 | Apache Pulsar up to 4.0.13/4.2.4 Entry Filter Policy entryFilters improper authorization

October 21, 2026 Yanac

A vulnerability categorized as critical has been discovered in Apache Pulsar up to 4.0.13/4.2.4. This impacts an unknown function of the file /admin/v2/non-persistent/{tenant}/{namespace}/{topic}/entryFilters of the component Entry Filter Policy. The manipulation results in improper authorization.

This vulnerability is known as CVE-2026-105932. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More