Apache Doris Frontend HTTP REST APIs allow unauthenticated callers to perform administrative operations because proper authentication was not enforced, representing an instance of CWE-306: Authentication Bypass. This authentication bypass enables an attacker with network access to the FE HTTP service to invoke any exposed admin command, potentially compromising cluster integrity, altering configuration, and causing instability or denial of service. The likely attack vector is remote network access to the FE HTTP port; this inference is drawn from the description that access is required only to the FE HTTP service.

Apache Doris installations running a version prior to 3.1.0 are affected, as stated by the CVE description. No other vendor or product variants are listed.

The CVSS score of 9.1 indicates a critical severity. The EPSS score of less than 1% suggests a low probability of exploitation at present. The vulnerability is not yet listed in the CISA KEV catalog, implying no widespread exploitation has been documented. An attacker only requires remote network access to the FE HTTP service; no local privileges or special conditions are specified.