Apache Flink vulnerabilities

4 CVEs affecting Apache Flink, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-35194, published 2026-05-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-17519: Apache Flink Improper Access Control Vulnerability, published 2021-01-05. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2024-05-23. EPSS: 97.8% chance of exploitation in the next 30 days. A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the…
CVE-2020-17518, published 2021-01-05. High severity, CVSS 7.5. EPSS: 51.4% chance of exploitation in the next 30 days. Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be…
CVE-2020-1960, published 2020-05-14. Medium severity, CVSS 4.7. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 to 1.6.4, 1.7.0 to 1.7.2, 1.8.0 to 1.8.3, 1.9.0 to 1.9.2, 1.10.0) where, when…
CVE-2026-35194, published 2026-05-15. High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days. Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers…