#authorization

Apache NiFi auth flaw let read-only users override parameter checks

CVE-2026-62354 affected NiFi 1.10.0 through 2.10.0; version 2.11.0 now requires write access for Parameter Context validation.