CVE-2026-121823: Security vulnerability

Published Nov 6, 2026

Updated

A vulnerability has been identified in armeria versions prior to 1.43.0, where inconsistent request path normalization can allow unauthenticated attackers to bypass path-based access controls and access protected resources.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade armeria to a version that resolves this vulnerability.
Fixed in 1.43.0

Event History

Nov 6, 2026

CVE Published

via MITRE·07:46 AM

Data Sourced

via MITRE·07:46 AM

DescriptionWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Deployments using armeria versions earlier than 1.43.0 are affected if they rely on path-based access controls to protect resources.

What does an attacker need to exploit the vulnerability?

An attacker can exploit the issue without authentication by using request paths that are normalized inconsistently, potentially bypassing path-based access controls.

What is the remediation?

Upgrade armeria to version 1.43.0 or later. Until upgrading, review and avoid relying solely on path-based access controls for protecting sensitive resources.

CVE-2026-121823: Security vulnerability

Remediation

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the remediation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the remediation?