CVE-2026-65945

MediumCVSS 6.5

Published: 10/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.61%

46th percentile - higher than 46% of all known CVEs

Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue.

Replayable JWT tokens in logs could allow an attacker to reuse tokens for unauthorized access, posing a serious security risk.

Upgrade Apache Ranger to version 2.9.0 or later and secure logs against unauthorized access.

Original NVD description (English source)

Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.