#VU121930 Permissions, Privileges, and Access Controls in Apache Solr - CVE-2026-22444
Published: January 22, 2026
Vulnerability identifier: #VU121930
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2026-22444
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Apache Solr
Apache Solr
Software vendor:
Apache Foundation
Apache Foundation
Description
The vulnerability allows a remote user to bypass implemented security restriction.
The vulnerability exists due to insufficient input validation on certain API parameters. A remote authenticated user can cause Solr to check the existence of and attempt to read file-system paths that should be disallowed by Solr's "allowPaths" security setting. These read-only accesses can allow users to create cores using unexpected configsets if any are accessible via the filesystem. On Windows systems configured to allow UNC paths this can additionally cause disclosure of NTLM "user" hashes.
Remediation
Install updates from vendor's website.