Skip to content
OpenAdvisories

Package · Maven

io.unitycatalog:unitycatalog-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2026-27478

    Unity Catalog has a JWT Issuer Validation Bypass Allows Complete User Impersonation

    Unity Catalog is an open, multi-modal Catalog for data and AI. In 0.4.0 and earlier, a critical authentication bypass vulnerability exists in the Unity Catalog token exchange endpoint (/api/1.0/unity-control/auth/tokens). The endpoint extracts the issuer (iss…

    unitycatalog unitycatalog io.unitycatalog:unitycatalog-server Maven