CVE-2026-49876
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. This vulnerability affects Apache Gravitino from version 1.0.0 through 1.2.1.
Risk Assessment
An attacker can access internal network resources and cloud metadata endpoints, potentially leading to sensitive data leakage or further escalation within the infrastructure.
Recommendation
It is recommended to upgrade Apache Gravitino to version 1.3.0 immediately, which fixes the vulnerability.
Other vulnerabilities in Apache Gravitino
See all- CVE-2026-41041Critical
A URL path injection vulnerability via unencoded user-supplied identifiers has been found in Apache Gravitino. The issue affects versions from 1.0.0 before 1.2.1.
- CVE-2026-41042Critical
Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter. Vulnerability in Apache Gravitino before version 1.2.1.
Original NVD description (English source)
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to version 1.3.0, which fixes the issue.