The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw, CVE-2020-17519, in Apache Flink to its Known Exploited Vulnerabilities (KEV) catalog. This three-year-old vulnerability is being actively exploited by attackers to gain unauthorized access to sensitive information. The Hacker News reported on this issue.