CVE-2026-111245
Apache TomEE: Privilege escalation via WS-Security caller identity leaking between requests
Description
After a successful WS-Security UsernameToken authentication, the caller identity stays associated with the worker thread once the request completes when web services are served by the standalone OpenEJB HTTP server. A remote unauthenticated attacker whose request is later processed on the same thread can invoke protected EJB methods with the identity of a previously authenticated user. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.
INFO
Published Date :
Nov. 10, 2026, 3:24 p.m.
Last Modified :
Nov. 10, 2026, 3:24 p.m.
Remotely Exploit :
No
Source :
apache
Solution
- Upgrade to version 10.3.0 or 11.0.0-M2.
- Apply security patches from the vendor.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-111245 vulnerability anywhere in the article.