CVE-2026-5795 | Eclipse Jetty up to 9.4.60/10.0.28/11.0.28/12.0.33/12.1.7 JASPIAuthenticator ThreadLocal sensitive information in resource not removed before reuse

A vulnerability was found in Eclipse Jetty up to 9.4.60/10.0.28/11.0.28/12.0.33/12.1.7 and classified as problematic. Affected is the function JASPIAuthenticator. Such manipulation of the argument ThreadLocal leads to sensitive information in resource not removed before reuse.

This vulnerability is traded as CVE-2026-5795. The attack may be launched remotely. There is no exploit available.