CVE-2026-100252 - Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization ID
CVE ID :CVE-2026-100252 Published : Nov. 4, 2026, 10:44 a.m. | 20 minutes ago Description :Improper Authorization vulnerability in Apache ZooKeeper. When SASL authentication is enabled on the client port, the server's SASL callback handler grants every authorization identity (authzid) that a...