Apache Doris — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Apache Doris, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-96443	Apache Doris: JDBC driver URL validation bypass leads to remote code execution CWE-829	-	-	2026-09-23
CVE-2026-31377	Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service CWE-287	7.5	High	2026-09-23
CVE-2026-68570	Apache Doris: Authorization bypass leading to unauthorized data access CWE-863	-	-	2026-09-14
CVE-2026-72524	Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables CWE-863	-	-	2026-09-14
CVE-2026-58319	Apache Doris: Improper Authentication in Frontend HTTP API CWE-306	-	-	2026-07-14
CVE-2024-48019	Apache Doris: allows admin users to read arbitrary files through the REST API CWE-22	4.9	-	2025-02-04
CVE-2024-27438	Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution CWE-494	8.8^AI	High ^AI	2024-03-21
CVE-2024-26307	Apache Doris: Possible race condition CWE-362	6.5^AI	Medium ^AI	2024-03-21
CVE-2023-41313	Apache Doris: Timing Attack weakness CWE-208	5.9^AI	Medium ^AI	2024-03-12
CVE-2023-41314	Apache Doris: Missing API authentication allowed DoS CWE-863	9.1^AI	Critical ^AI	2023-12-18

All 10 known CVE vulnerabilities affecting Apache Doris with full Chinese analysis, references, and POCs where available.