CVE-2026-10622
Improper Authentication in Collibra Agent REST API
Publication date: 2026-06-02
Last updated on: 2026-06-02
Assigner: CERT/CC
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| collibra | agent | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper authentication issue in the REST API of the Collibra Agent. It allows a remote attacker who is not authenticated to access privileged functionality by exploiting exposed '/rest/*' endpoints.
How can this vulnerability impact me? :
An attacker can remotely access privileged functions without authentication, potentially leading to unauthorized actions, data exposure, or manipulation within the Collibra Agent environment.
What immediate steps should I take to mitigate this vulnerability?
To mitigate the vulnerability CVE-2026-10622, it is recommended to update the Collibra Agent to the latest patched version released by Collibra.
Since the vulnerability allows remote unauthenticated access to privileged REST API endpoints, immediate mitigation steps include restricting access to the /rest/* endpoints by network controls such as firewalls or API gateways.
Additionally, monitoring and limiting exposure of the Collibra Agent to untrusted networks can reduce the risk of exploitation.