Executive brief
Apache Druid’s Kerberos authenticator uses a weak fallback secret
Affected products
- Maven org.apache.druid:druid
Junglewise Threat Intelligence
CVE-2025-59390: Apache Druid’s Kerberos authenticator uses a weak fallback secret
CVE-2025-59390 · Severity: low · CVSS 3.1 · Published 2025-11-26
Technologies: org.apache.druid:druid (Maven). Vendors: Maven.