Executive brief
Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates
Affected products
- Maven org.apache.nifi:nifi-web-api
Junglewise Threat Intelligence
CVE-2026-25903: Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates
CVE-2026-25903 · Severity: medium · CVSS 4 · Published 2026-02-17
Technologies: org.apache.nifi:nifi-web-api (Maven). Vendors: Maven.