CVE-2026-101590

Summary

The Helidon microprofile-security component (versions 4.0.0–4.5.5) lacks proper authentication enforcement, allowing unauthenticated attackers to bypass security controls and gain unauthorized read/write access to critical data via HTTP.

Exploitability

Easily exploitable by any unauthenticated attacker with network access over HTTP; no user interaction or privileges required.

Blast radius

Successful exploitation enables full compromise of confidentiality and integrity for all Helidon-accessible data, potentially affecting all downstream services and stored information.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Helidon 4.5.6 or later, as this version contains the official fix for CVE-2026-101590.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.