CVE-2026-5795

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-5795
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5795.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-5795
Aliases
Downstream
Related
Published
2026-04-08T13:32:28.935Z
Modified
2026-07-22T05:30:10.124678981Z
Severity
  • 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.

Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals.

A subsequent request using the same thread inherits the ThreadLocal values, leading to a broken access control and privilege escalation.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5795.json",
    "cna_assigner": "eclipse",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "11.0.0"
                },
                {
                    "last_affected": "11.0.28"
                },
                {
                    "introduced": "10.0.0"
                },
                {
                    "last_affected": "10.0.28"
                },
                {
                    "introduced": "9.4.0"
                },
                {
                    "last_affected": "9.4.60"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-226",
        "CWE-287"
    ]
}
References

Affected packages

Git / github.com/jetty/jetty.project

Affected ranges

Type
GIT
Repo
https://github.com/jetty/jetty.project
Events
Introduced
bf9d17540c7ae4c91be30c045a9485aa2030d3e5
Last affected
8f1440587e9e4ae7db3d74cf205643f3d707148d
Introduced
b9645a17373e4e9b7f30b6c0a07defcea2cb660b
Last affected
65a55c55a68c56d5f2e8232164439bd6e76e53d1
Introduced
432f896d7a4555fcc81f38108757ea0aca8788e6
Last affected
7559873b6e46eea7c2c6da2b58327ea2ecf941f4
Introduced
28100e8da711e44c0722ed10bd413ae862497539
Fixed
57e7adb250592bd15f573e7820be9b64632c6637
Introduced
c8372b65bd15404de1444d68902c0455a3a69b64
Fixed
c9cdc9aaa434a3665b8a53b4d1cc3684992da649
Database specific 
{
    "cpe": "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "9.4.0"
        },
        {
            "last_affected": "9.4.58"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "last_affected": "10.0.26"
        },
        {
            "introduced": "11.0.0"
        },
        {
            "last_affected": "11.0.26"
        },
        {
            "introduced": "12.0.0"
        },
        {
            "fixed": "12.0.34"
        },
        {
            "introduced": "12.1.0"
        },
        {
            "fixed": "12.1.8"
        }
    ]
}

Affected versions

jetty-12.*
jetty-12.0.0x
jetty-12.0.14
jetty-12.0.15
jetty-12.0.19
jetty-12.0.22
jetty-12.0.23
jetty-12.0.30
jetty-12.0.31
jetty-12.0.5
jetty-12.0.6
jetty-12.1.0.beta1
jetty-12.1.2
jetty-12.1.4
jetty-12.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5795.json"