org.apache.accumulo vulnerabilities

Products

• org.apache.accumulo/accumulo-master 1
• org.apache.accumulo/accumulo-server-base 1
• org.apache.accumulo/accumulo-shell 1

Latest org.apache.accumulo CVEs

Newest publication first

1. CVE-2026-62764 Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions

   Published 2026-07-17

   Medium·CVSS 5.7

   Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components (compaction-coordinator, compactor, gc, manager, monitor, tserve...

2. CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials

   Published 2023-06-21

   Critical·CVSS 9.8

   Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade...

3. CVE-2020-17533 Apache Accumulo Improper Handling of Insufficient Permissions

   Published 2020-12-29

   High·CVSS 8.1

   Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values of the 'canFlush' and...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.