PT-2026-47630 · Dtstack · Taier

Anch0R · Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-11618

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file taier-data-develop/src/main/java/com/dtstack/taier/develop/interceptor/LoginInterceptor.java of the component Source Connection Test Endpoint. Executing a manipulation can lead to improper authentication. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called f95389e7f74acec42bcee079a616aaa06f9551d2. A patch should be applied to remediate this issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-11618

Affected Products

Taier

References · 8

• 🔥 https://github.com/DTStack/Taier/issues/1194 · Exploit
• https://github.com/DTStack/Taier/commit/f95389e7f74acec42bcee079a616aaa06f9551d2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-11618 · Security Note
• https://github.com/DTStack/Taier · Note
• https://vuldb.com/vuln/369299/cti · Note
• https://vuldb.com/submit/834008 · Note
• https://vuldb.com/vuln/369299 · Note
• https://vuldb.com/cve/CVE-2026-11618 · Note