{"id":"CVE-2026-119641","kind":"vulnerability","aliases":["CVE-2026-119641"],"related":[],"title":"Apache Oozie: authenticated users can take over other tenants' workflow jobs","description":"** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache Oozie. An authenticated Oozie user can reconfigure another tenant's\nworkflow job and change its ownership.\n\n\n\nThis issue affects Apache Oozie: all versions.\n\n\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\n\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.","summary":"Apache Oozie, a workflow scheduler for Hadoop, has an input validation flaw that lets an authenticated user reconfigure another tenant's workflow job and change its ownership. The project is retired, so no fixed release is planned.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apache-oozie","hadoop","infrastructure","self-hosted"],"not_affected_if":["single-tenant","trusted-users-only"],"how_to_check":"- Check whether an Apache Oozie instance is deployed, for example by looking for the Oozie server process or its installed package version.\n- Confirm whether multiple tenants or teams share the same Oozie instance and can submit jobs.","fix":"- Apache Oozie: no fixed version; the sources say the project is retired and recommend finding an alternative or restricting access to trusted users.","status":"open","published_at":"2026-11-03T10:17:14+00:00","first_seen_at":"2026-11-03T10:20:15+00:00","triaged_at":"2026-11-03T10:20:44+00:00","updated_at":"2026-11-03T10:20:44+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-03T10:20:44Z","model":"claude-haiku-5-5","output":{"fix":"- Apache Oozie: no fixed version; the sources say the project is retired and recommend finding an alternative or restricting access to trusted users.","reach":"network","title":"Apache Oozie: authenticated users can take over other tenants' workflow jobs","impact":"medium","summary":"Apache Oozie, a workflow scheduler for Hadoop, has an input validation flaw that lets an authenticated user reconfigure another tenant's workflow job and change its ownership. The project is retired, so no fixed release is planned.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["apache-oozie","hadoop","self-hosted"],"confidence":0.6,"fix_status":"none","needs_auth":"yes","worst_case":"Attacker changes another tenant's workflow job and its ownership","analyst_note":"","how_to_check":"- Check whether an Apache Oozie instance is deployed, for example by looking for the Oozie server process or its installed package version.\n- Confirm whether multiple tenants or teams share the same Oozie instance and can submit jobs.","plain_action":"","needs_analyst":false,"not_affected_if":["single-tenant","trusted-users-only"],"who_is_affected":"Teams that run Apache Oozie with more than one tenant or user group submitting workflow jobs on the same instance can have one tenant alter another's jobs. Single-tenant deployments where every user is trusted are less exposed. The sources do not say which Oozie versions are affected beyond 'all versions'.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000699,"input_tokens":4199,"output_tokens":559,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-119641':14A,17A '-2026':13A,16A 'access':121C 'affect':90C,132C 'altern':118C 'anoth':44B,79C 'apach':1A,19B,26B,71C,91C 'apache-oozi':18B 'assign':65C 'authent':3A,41B,74C 'chang':50B,85C 'cve':12A,15A 'find':116C 'fix':59B,109C 'flaw':37B 'hadoop':21B,32B 'host':25B 'improp':66C 'infrastructur':22B 'input':35B,67C 'instanc':124C 'issu':89C,111C 'job':11A,48B,83C 'let':39B 'longer':137C 'maintain':141C 'note':128C 'oozi':2A,20B,27B,72C,75C,92C 'ownership':52B,87C 'plan':62B,103C 'product':133C 'project':54B,97C 'recommend':114C 'reconfigur':43B,78C 'releas':60B,105C 'restrict':120C 'retir':56B,99C 'schedul':30B 'self':24B 'self-host':23B 'support':138C 'take':6A 'tenant':9A,45B,80C 'trust':126C 'unsupport':63C 'user':4A,42B,76C,112C,127C 'valid':36B,68C 'version':94C,107C 'vulner':69C,130C 'workflow':10A,29B,47B,82C","nicknames":[],"mitigations":[],"who_affected":"Teams that run Apache Oozie with more than one tenant or user group submitting workflow jobs on the same instance can have one tenant alter another's jobs. Single-tenant deployments where every user is trusted are less exposed. The sources do not say which Oozie versions are affected beyond 'all versions'.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["apacheoozie","hadoop","infrastructure","medium","selfhosted"],"first_public_at":"2026-11-03T10:17:14+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119641","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119641","severity":null,"published_at":"2026-11-03T10:17:14+00:00","modified_at":"2026-11-03T10:17:14+00:00","first_seen_at":"2026-11-03T10:20:15+00:00","fetched_at":"2026-11-03T10:20:15+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}