CVE-2025-59060 | Apache Ranger up to 2.6.x NiFiRegistryClient/NifiClient certificate host validation

A vulnerability marked as critical has been reported in Apache Ranger up to 2.6.x. This vulnerability affects unknown code of the component NiFiRegistryClient/NifiClient. The manipulation leads to certificate with host mismatch.

This vulnerability is uniquely identified as CVE-2025-59060. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.