Non notée
CVE-2026-63619 Missing Authorization vulnerability in Apache Kylin
Description
Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Kylin 5.0 | premières → 5.0.4 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Kylin
Les 40 CVE de Apache Kylin →
CVE-2026-108837
Apache Kylin: Potential computed-column resource exhaustion
Non notée
CVE-2026-108833
Apache Kylin: default startup profile miss security settings
Non notée
CVE-2026-108823
Apache Kylin: Potential unauthenticated job metadata replacement
Non notée
CVE-2026-108780
Potential JDBC source configuration validation vulnerability in Apache Kylin
Non notée