CLEANSTART-2026-IC37739: Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check
Published Nov 13, 2026
·Updated
Security vulnerability affects the solr package. Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check.
Affected Software
1 affected componentFixes available
cleanstart/solr<9.11.0-r2
9.11.0-r2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/solrto a version that resolves this vulnerability.Fixed in 9.11.0-r2
Event History
Nov 13, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable over the network and requires no privileges or user interaction. The attack complexity is rated low.
2
What is the expected security impact?
The stated impact is high confidentiality loss. No integrity or availability impact is indicated.