CVE-2026-10622: CVE-2026-10622

Synopsis

Improper authentication in the Collibra Platform REST API (Collibra Agent) allows a remote attacker with no credentials to reach privileged endpoints under '/rest/*'. The service is exposed over the network and requires no prior authentication or victim interaction, making it straightforward to reach from any network-adjacent host. Successful exploitation gives an attacker read access to sensitive data and limited write capability against the affected service. Patched-image rebuilds at versions 2025.10.9, 2025.10.399, 2025.11.7, 2026.02.6, and 2026.03.4 (and later) are available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the Collibra REST API service over the network; the vulnerability is remotely exploitable with no requirement for LAN or physical proximity.

• AuthenticationNot required

  No credentials of any kind are needed; the improper authentication flaw allows unauthenticated access to privileged '/rest/*' endpoints directly.

• Victim interactionNot required

  Exploitation is fully server-side and requires no action from any user of the Collibra Platform.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special conditions, race wins, or environmental factors to succeed.

Blast Radius

• Reads sensitive data exposed through privileged REST API endpoints, which may include data governance metadata, user account details, and stored configuration.
• Performs limited writes or modifications to resources accessible via the privileged '/rest/*' endpoints, potentially altering governance policies or asset records.
• No direct availability impact is indicated by the CVSS vector, so service uptime is not directly affected by exploitation alone.