Apache Doris
Apache Doris Updates Address Authentication Bypass and JDBC Code Execution
09/23/2026
Apache Doris has separate metadata-authentication and privileged JDBC code-execution flaws. Restrict FE interfaces and driver-management permissions, then choose an upgrade covering both; the 4.0.8 metadata fix alone does not establish JDBC protection.
