# MA-1118.082024: MyCERT Advisory - Security Updates – Apache Linkis

**Date:** 10 Aug 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1118.082024  
**Advisory ID:** MA-1118.082024

---

**1.0 Introduction**
CyberSecurity Malaysia has observed Apache released security updates to address multiple vulnerabilities in its product Apache Linkis. CVE-2024-27181: Privilege Escalation Attack vulnerability. Privilege Escalation in Basic management services where the attacking user is a trusted account allows access to Linkis's Token information. CVE-2024-27182: Engine material management Arbitrary file deletion vulnerability. A user with an administrator account could delete any file accessible by the Linkis system user.
**2.0 Impact**
This vulnerability could enable an administrator to delete any file accessible by the Linkis system user, leading to data loss or disruption of critical operations.
**3.0 Affected Products**
- Apache Linkis prior to version 1.6.0.
**4.0 Recommendations**
CyberSecurity Malaysia urgers users and organization to review the [Apache Security Bulletin](https://httpd.apache.org/download.cgi), follow the Mitigation steps and apply the necessary updates. 
Kindly refer to the URL for more information: <https://linkis.apache.org/download/release-notes-1.6.0/>
Generally, we advise users of this device to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999 through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17.30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0    References**
- <https://linkis.apache.org/download/release-notes-1.6.0/>
- <https://securityonline.info/critical-security-vulnerabilities-discovered-in-apache-linkis-users-urged-to-upgrade-immediately/>