Skip to content
Threat Feed
Subscribe

Product

Apollo ConfigService (< 2.5.2)

1 brief RSS
high advisory

Apollo ConfigService Authentication Bypass via Raw Config File AppId Parsing

An authentication bypass vulnerability (CVE-2026-59955) in Apollo ConfigService allows unauthenticated remote attackers to read raw configuration data by exploiting an incorrect appId parsing logic for the raw config file endpoint, affecting versions prior to 2.5.2.

Apollo ConfigService authentication-bypass data-exposure vulnerability cloud
2t