CVE-2026-85973: Cleartext transmission in Progress MarkLogic Server cluster join operations
Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could intercept or modify information transmitted through an affected connection.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 12.1.0
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Deployments running Progress MarkLogic Server 12.x before 12.1.0 are affected when they use the cluster-management communications described in the advisory. Exploitation requires an attacker to be positioned on the network path of an affected connection.
What could an attacker do if they can intercept the affected traffic?
A network-positioned attacker could intercept information transmitted through the affected connection or modify that information. The reported impact includes high confidentiality and integrity impact.
Does exploitation require credentials or user interaction?
No privileges or user interaction are required according to the supplied vector. However, exploitation has high attack complexity and requires network access.
What version resolves the issue?
Upgrade to Progress MarkLogic Server 12.1.0 or later. The issue affects 12.x releases before 12.1.0.