A medium severity security vulnerability identified as CVE-2026-112910 affects the apache-superset package. The issue is resolved in version 6.1.0-r8 and later. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a local attack vector with low complexity, requiring low privileges and no user interaction, impacting confidentiality, integrity, and availability to a limited extent.