CVE-2026-65945

CVE-2026-65945: Apache Ranger: Logs contain replayable JWT bearer tokens

Vendor Apache Software Foundation

Product Apache Ranger

Weakness CWE-532 · Sensitive info in logs

Published August 10, 2026

Last update August 10, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.

Key dates

02Disclosure timeline

August 10, 2026 CVE published

August 10, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-65945 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/532.html AskarLabs — CWE-532 write-up Insertion of Sensitive Information into Log File

Related vulnerabilities

04Related CVE

CVE-2024-32811 WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability CVE-2024-33922 WordPress WP Media Cleaner plugin <= 6.7.2 - Sensitive Data Exposure via Log File vulnerability CVE-2024-33637 WordPress Solid Affiliate plugin <= 1.9.1 - Sensitive Data Exposure via Log File vulnerability CVE-2025-24651 WordPress WebToffee WP Backup and Migration plugin <= 1.5.3 - Sensitive Data Exposure vulnerability CVE-2024-31245 WordPress ConvertKit plugin <= 2.4.5 - Email Disclosure in Log File vulnerability