CVE-2026-71563: Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions

Summary by Cyber Security News16 Oct 2026, 06:30 CET

About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/202

Posted by Enxin Xie on Oct 15 Severity: moderate Affected versions: - Apache Answer through 2.0.2 Description: Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP answer retrieval tool allows holders of a global API key to access answer content associated with hidden, deleted, or pending-review questions.

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.