Apache Superset fixes High-severity dataset authorization bypass (CVE-2026-23982)
Apache disclosed CVE-2026-23982, a High-severity authorization bypass in Superset versions before 6.0.0 enabling low-privilege users to access restricted data via dataset SQL overwrite.
NewsVulnerabilitiesWeb Security
24 Feb 2026