NiFi-15567 contains a fix for CVE-2026-25903, which address a privilege escalation issue that allows users without the rights to deploy privileged processors to change the configuration of these processors.
A fix for this should be expedited and ideally find its way into the next Stackable release.