CVE-2026-41081 | Apache Storm Client up to 2.8.6 TLS Client Authentication Failure certificate validation

A vulnerability was found in Apache Storm Client up to 2.8.6 and classified as critical. The affected element is an unknown function of the component TLS Client Authentication Failure Handler. The manipulation results in improper certificate validation.

This vulnerability is identified as CVE-2026-41081. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.