CVE-2026-44825
Description
A flaw was found in Apache Solr. Hardcoded credentials in the Basic Authentication setup tool allow a remote attacker to gain full administrative access to the cluster. This occurs when the bin/solr auth enable tool is used, as publicly known default credentials are silently installed alongside user-specified accounts. This vulnerability can lead to unauthorized control over the Solr cluster.
Statement
This flaw is rated as Important because it allows a remote attacker to gain full administrative access to an Apache Solr cluster. When the bin/solr auth enable tool is used to set up Basic Authentication, publicly known default credentials are silently installed alongside user-specified accounts. This can lead to unauthorized control over the Solr cluster if these default credentials are not promptly removed or changed.
Mitigation
To mitigate this issue, administrators must either delete the default template users (superadmin, admin, search, index) from `security.json` or promptly change their passwords after employing the `bin/solr auth enable` tool. This action prevents unauthorized administrative access to the Solr cluster. A restart or reload of the Solr service may be necessary for these changes to be applied effectively.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 8.1 | 9.8 | 8.1 |
| Attack Vector | Network | Network | Network |
| Attack Complexity | High | Low | High |
| Privileges Required | None | None | None |
| User Interaction | None | None | None |
| Scope | Unchanged | Unchanged | Unchanged |
| Confidentiality | High | High | High |
| Integrity Impact | High | High | High |
| Availability Impact | High | High | High |
Vector
Red Hat: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cve.org: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Understanding the Weakness (CWE)
Authentication
Technical Impact: Gain Privileges or Assume Identity
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
