Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Impala

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-97720

    Apache Impala: Impala Executor Webserver Auth Bypass

    Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tok…

    Apache Software Foundation Apache Impala
  • Critical 9.8
    CVE-2026-56207

    Apache Impala: SAML authentication bypass via forged bearer token

    Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user. This issue affects Apache Impala: >=4.0.0. Users are recommended to upgrade to version 4.5.…

    Apache Software Foundation Apache Impala