Description
A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attackers to bypass path-based access controls and access protected resources.
Published: 2026-11-06
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 06 Nov 2026 09:45:00 +0000

Type Values Removed Values Added
Title Path Normalization Bypass Allowing Unauthorized Access
Weaknesses CWE-20
CWE-285

Fri, 06 Nov 2026 08:00:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attackers to bypass path-based access controls and access protected resources.
References
Metrics cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: LY-Corporation

Published:

Updated: 2026-11-06T07:46:56.347Z

Reserved: 2026-11-04T05:50:04.722Z

Link: CVE-2026-121823

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-06T08:17:20.850

Modified: 2026-11-06T08:17:20.850

Link: CVE-2026-121823

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-06T09:30:08Z

Weaknesses
  • CWE-20

    Improper Input Validation

  • CWE-285

    Improper Authorization