CVE-2026-11618 DTStack Taier Source Connection Test Endpoint LoginInterceptor.java preHandle improper authentication
Remote attackers can bypass authentication in the Source Connection Test Endpoint due to improper handling in the LoginInterceptor.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-11618?
CVE-2026-11618 is a medium-severity authentication bypass vulnerability in DTStack Taier, published on 9 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file taier-data-develop/src/main/java/com/dtstack/taier/develop/interceptor/LoginInterceptor.java of the component Source Connection Test Endpoint. Executing a manipulation can lead to improper authentication. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called f95389e7f74acec42bcee079a616aaa06f9551d2. A patch should be applied to remediate this issue.
Weakness: CWE-287
Which versions are affected by CVE-2026-11618?
How do I fix CVE-2026-11618?
No fix has been published for CVE-2026-11618 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-11618 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-11618 exists.
Sources
Also known as GHSA-287g-pjcr-xhgc.