This vulnerability in Apache Thrift (CVE-2026-43869) is categorized under CWE-297 (Improper Validation of Certificate with Host Mismatch). It affects all versions prior to 0.23.0 and allows a security bypass due to improper certificate validation. The vulnerability has a CVSS 3.1 base score of 7.3, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability. Red Hat advisories confirm the issue and recommend upgrading to version 0.23.0 where the vulnerability is fixed.

The vulnerability allows an attacker to bypass security controls by exploiting improper certificate validation when the certificate's host does not match the expected host. This can lead to unauthorized access or man-in-the-middle attacks compromising confidentiality, integrity, and availability of affected systems running Apache Thrift versions before 0.23.0.

A fix is available in Apache Thrift version 0.23.0. Users should upgrade to this version to remediate the vulnerability. Red Hat advisories also provide updated packages addressing this issue. No alternative mitigations or temporary fixes are indicated, so applying the official update is the recommended action.