Apache bRPC security advisory: 35 vulnerabilities fixed in 1.18.0

Posted by Weibing Wang on Oct 20 Hi, all We have released the Apache bRPC 1.18.0, with 35 vulnerabilities fixed (16 high, 19 moderate) . The vulnerabilities descriptions are below: ### CVE-2026-48830: Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests Severity: high Affected versions: - Apache bRPC (brpc) through 1.17.0 - Apache bRPC (brpc) 1.18.0 unaffected Description: Improper authentication in Apache bRPC through...

Published 21-Oct-2026 04:28 UTC · First seen 21-Oct-2026 04:27 UTC

Sources

• Open Source Security · 21-Oct-2026