CVE-2026-75415: AntFlow AntFlow vulnerability
AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java retrieves the userid from the request header as the core of the identity verification mechanism, allowing attackers to forge any user identity credential information, thereby causing sensitive information leakage.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker needs to be able to send requests to the affected AntFlow instance and control the userid request header. The vulnerable identity verification mechanism treats that header value as the basis for user identity.
Who is exposed to sensitive-information disclosure?
Users of AntFlow V2.0.0 are exposed where an attacker can reach endpoints protected by the affected request logging filter. An attacker can forge another user's identity credential information through the userid header, which can lead to disclosure of sensitive information.
How can I check whether an instance is affected?
Verify whether the deployment is AntFlow V2.0.0 and inspect JiMuMDCCommonsRequestLoggingFilter.java. The described vulnerable behavior is retrieval of userid directly from a request header as the core identity-verification mechanism.