Vulnerability Description
In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals. A subsequent request using the same thread inherits the ThreadLocal values, leading to a broken access control and privilege escalation.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eclipse | Jetty | >= 9.4.0, <= 9.4.58 |
Related Weaknesses (CWE)
References
- https://github.com/jetty/jetty.project/security/advisories/GHSA-r7p8-xq5m-436chtBroken Link
- https://gitlab.eclipse.org/security/cve-assignment/-/issues/92Broken Link
FAQ
What is CVE-2026-5795?
CVE-2026-5795 is a vulnerability with a CVSS score of 7.4 (HIGH). In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an ear...
How severe is CVE-2026-5795?
CVE-2026-5795 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-5795?
Check the references section above for vendor advisories and patch information. Affected products include: Eclipse Jetty.