Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2026-62764

Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions

Description

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components (compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver), leading to a denial of service. This issue affects Apache Accumulo 2.1.4 and 2.1.5. Users are recommended to upgrade to version 2.1.6, which fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Accumulo

Default version status: unaffected

  • 2.1.4 to ≤ 2.1.5affected

References