CVE-2026-105931 | Apache Pulsar up to 4.0.13/4.2.4 Transaction Administration API /admin/v3/transactions privileges management

October 21, 2026 Yanac

A vulnerability was found in Apache Pulsar up to 4.0.13/4.2.4. It has been rated as problematic. This affects an unknown function of the file /admin/v3/transactions of the component Transaction Administration API. The manipulation leads to improper privilege management.

This vulnerability is traded as CVE-2026-105931. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More