{"id":"CVE-2026-119641","published":"2026-11-03T10:17:14.987","lastModified":"2026-11-03T16:11:22.397","description":"** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache Oozie. An authenticated Oozie user can reconfigure another tenant's\nworkflow job and change its ownership.\n\n\n\nThis issue affects Apache Oozie: all versions.\n\n\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\n\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-20"],"vendors":[],"products":[],"references":[{"url":"https://lists.apache.org/thread.html/b0vh3rxt3dbdvyz44210q2sz3201213p","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/02/4","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}