CVE-2026-32773
Description
A flaw was found in Apache Spark. The Spark History Server lacks proper Cross-Site Scripting (XSS) escaping, allowing a malicious Spark job to generate arbitrary unescaped frontend code. This vulnerability can be exploited by an attacker who has the ability to launch a Spark job and can trick a user with higher permissions into visiting the Spark history web page. Successful exploitation could lead to a minimal privilege escalation within the user's browser.
Statement
Red Hat rates this issue Low because exploitation requires privileges to submit a malicious Spark job and interaction by a higher-privilege Spark History Server user.
Mitigation
Restrict Spark job submission and Spark History Server access to trusted users until affected Spark components can be updated.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 3.5 | N/A | 6.1 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | High | N/A | None |
| User Interaction | Required | N/A | Required |
| Scope | Unchanged | N/A | Changed |
| Confidentiality | Low | N/A | Low |
| Integrity Impact | Low | N/A | Low |
| Availability Impact | None | N/A | None |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
cve.org: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
