CVE-2026-111247
Apache TomEE: Privilege escalation via user name matching a role name
Description
When resolving security roles of a realm-authenticated caller, the caller's user name is also treated as a role name in addition to the roles assigned by the realm. An authenticated attacker who can obtain an account whose user name equals a role name, for example through self-registration, is granted that role wherever authorization is evaluated through the Jakarta Authorization policy. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.
INFO
Published Date :
Nov. 10, 2026, 3:23 p.m.
Last Modified :
Nov. 10, 2026, 3:23 p.m.
Remotely Exploit :
No
Source :
apache
Solution
- Upgrade to version 10.3.0 or 11.0.0-M2.
- Ensure user names do not match role names.
- Review and enforce role assignment policies.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-111247 vulnerability anywhere in the article.