Home

Description

In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals. A subsequent request using the same thread inherits the ThreadLocal values, leading to a broken access control and privilege escalation.

PUBLISHED Reserved 2026-04-08 | Published 2026-04-08 | Updated 2026-04-09 | Assigner eclipse




HIGH: 7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Problem types

CWE-226 Sensitive information in resource not removed before reuse

CWE-287 Improper Authentication

Product status

Default status
unaffected

12.1.0 (semver)
affected

12.0.0 (semver)
affected

11.0.0 (semver)
affected

10.0.0 (semver)
affected

9.4.0 (semver)
affected

Credits

https://github.com/HRsGIT finder

References

github.com/...ecurity/advisories/GHSA-r7p8-xq5m-436chttps://

gitlab.eclipse.org/security/cve-assignment/-/issues/92

cve.org (CVE-2026-5795)

nvd.nist.gov (CVE-2026-5795)

Download JSON