# CVE-2026-67249: Apache Answer verification code reuse across workflows

Source: https://junglewise.ai/threats/cve-2026-67249-a-vulnerability-in-apache-answer-this-issue-affects-apache-answer  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-19. Updated: 2026-10-19  
License: CC BY 4.0 with a link back

CVE-2026-67249 · Severity: info · Published 2026-10-19

Apache Answer is a Q&A platform that uses email-based workflows to verify user actions. A security flaw allows verification codes intended for one workflow to be accepted by other sensitive workflows, potentially allowing an attacker to bypass authentication checks or gain unauthorized access to sensitive operations without proper authorization.

Technologies: [Apache Answer](https://junglewise.ai/threats/technologies/apache-answer). Vendors: [Apache](https://junglewise.ai/threats/vendors/apache).

## Quick answers

**Is CVE-2026-67249 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-67249 being exploited in the wild.

**How severe is CVE-2026-67249?** Informational severity, published 19 October 2026.

**Which products and versions are affected?** Apache Answer through 2.0.2.

**Is there a fix for CVE-2026-67249?** Yes: fixed in Apache Answer 2.0.3. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-67249 attacked?** It is in a web application.

**Am I affected by CVE-2026-67249?** Check whether you run Apache Answer at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Apache Answer 2.0.3

## Technical details

The vulnerability stems from insufficient enforcement of the purpose or context of email verification codes in Apache Answer. A verification code generated for one email-based workflow can be reused in another sensitive workflow due to missing validation of the code's intended purpose. This allows context confusion attacks where an attacker intercepts or observes a code from one workflow and applies it to gain unauthorized access to a different workflow.

## Affected products

- Apache Answer through 2.0.2

## Timeline

- 2026-10-19: disclosed

## References

- [https://lists.apache.org/thread/kbdgj9vzd24zb4r2d9ydqyr6f70rpg0v](https://lists.apache.org/thread/kbdgj9vzd24zb4r2d9ydqyr6f70rpg0v)

## Related threats

- [Apache Answer missing authentication for reactions API](https://junglewise.ai/threats/cve-2026-90910-missing-authentication-for-critical-function-vulnerability-in)
- [Apache Answer authentication algorithm implementation flaw](https://junglewise.ai/threats/cve-2026-86589-incorrect-implementation-of-authentication-algorithm)
- [Apache Answer missing authorization checks](https://junglewise.ai/threats/cve-2026-79633-vulnerability-in-apache-answer-this-issue-affects-apache-answer)
- [Apache Answer insufficient session expiration](https://junglewise.ai/threats/cve-2026-79624-insufficient-session-expiration-vulnerability-in-apache-answer)
- [Apache Answer sensitive information exposure in search](https://junglewise.ai/threats/cve-2026-79620-exposure-of-sensitive-information-through-data-queries)