Ce mail provient de l'extérieur, restons vigilants

=====================================================================


                            CERT-Renater

                Note d'Information No. 2026/VULN894
_____________________________________________________________________

DATE                : 16/09/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Apache Doris versions prior to
                                      4.0.8, 4.1.4.
  
=====================================================================
https://lists.apache.org/thread/4gnx6bfr45fbtovno6psz00opm9tzjhg
https://lists.apache.org/thread/4frxs7d3hdmtkkw7o4x9g66yxnfrkjt9
_____________________________________________________________________

CVE-2026-68570: Apache Doris: Authorization bypass leading to
unauthorized data access

Severity: important 

Affected versions:

- Apache Doris 2.0.0 through 2.1.*
- Apache Doris 3.0.0 through 3.0.*
- Apache Doris 4.0.0 before 4.0.8
- Apache Doris 4.1.0 before 4.1.4

Description:

Incorrect Authorization vulnerability in Apache Doris allows an
authenticated user to bypass privilege checks and access data they
are not authorized to read, resulting in unauthorized disclosure
of information.


This issue affects Apache Doris: from 2.0.0 through 2.1.*, from
3.0.0 through 3.0.*, from 4.0.0 before 4.0.8, and from 4.1.0
before 4.1.4.


Users are recommended to upgrade to a fixed release (4.0.8 or
4.1.4), which fixes the issue.

Credit:

Calvin Kirs, Security Researcher at SelectDB (finder)

References:

https://doris.apache.org
https://www.cve.org/CVERecord?id=CVE-2026-68570

_____________________________________________________________________

CVE-2026-72524: Apache Doris: Authorization bypass allowing a
low-privilege user to read/write/drop arbitrary tables

Severity: important 

Affected versions:

- Apache Doris 3.1.0 through 3.1.*
- Apache Doris 4.0.0 through 4.0.7
- Apache Doris 4.1.0 through 4.1.3

Description:

Incorrect Authorization vulnerability in Apache Doris allows an
authenticated user to bypass privilege checks and access or modify
data they are not authorized to.


This issue affects Apache Doris: from 3.1.0 through 3.1.*, from
4.0.0 through 4.0.7, and from 4.1.0 through 4.1.3.



Users are recommended to upgrade to a fixed release (4.0.8 or
4.1.4), which fixes the issue.

Credit:

Calvin Kirs, Security Researcher at SelectDB (finder)

References:

https://doris.apache.org
https://www.cve.org/CVERecord?id=CVE-2026-72524

=========================================================

+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================