CVE-2025-59060: Apache Ranger: Hostname verification bypass in NiFiRegistryClient and NifiClient
Published Mar 2, 2026
·Updated
Hostname verification bypass issue in Apache Ranger NiFiRegistryClient/NiFiClient is reported in Apache Ranger versions <= 2.7.0.
Users are recommended to upgrade to version 2.8.0, which fixes this issue.
Affected Software
2 affected components
Apache Ranger<=2.7.0
Apache Ranger<2.8.0
Event History
Mar 3, 2026
CVE Published
via MITRE·10:46 AM
Data Sourced
via MITRE·10:46 AM
DescriptionWeakness
Data Sourced
via NVD·11:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-59060?
CVE-2025-59060 has a medium severity rating due to the potential for hostname verification bypass.
2
How do I fix CVE-2025-59060?
To fix CVE-2025-59060, users should upgrade to Apache Ranger version 2.8.0 or later.
3
What versions of Apache Ranger are affected by CVE-2025-59060?
Apache Ranger versions up to and including 2.7.0 are affected by CVE-2025-59060.
4
What is the impact of CVE-2025-59060?
The impact of CVE-2025-59060 is that it allows a bypass of hostname verification, which can lead to security vulnerabilities.
5
Is there a workaround for CVE-2025-59060?
There is no official workaround for CVE-2025-59060; upgrading to the fixed version is the recommended course of action.