CVE-2026-65945 describes a vulnerability in Apache Ranger where replayable JWT tokens are recorded in log files in versions up to and including 2.8.0. This exposure of sensitive authentication tokens in logs can lead to unauthorized use if an attacker gains access to these logs. The vulnerability is classified under CWE-532, which concerns the insertion of sensitive information into log files. The vendor recommends upgrading to Apache Ranger 2.9.0, where this issue is resolved.

The exposure of replayable JWT tokens in logs can allow an attacker with access to these logs to impersonate users or services by replaying the tokens. This compromises confidentiality and integrity of authentication tokens but does not directly affect availability. The CVSS score of 6.5 reflects a medium severity impact with network attack vector, no privileges required, and no user interaction needed.

Users should upgrade Apache Ranger to version 2.9.0 or later, where this vulnerability is fixed. No other mitigation or temporary workaround is indicated. Patch status is confirmed by the vendor's recommendation to upgrade.