Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Impala

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-65181

    Apache Impala: RCE via External Data Source Class Loading

    Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue.

    Apache Software Foundation Apache Impala
  • High 8.8
    CVE-2026-57866

    Apache Impala: Secrets Exfiltration via SSRF

    Server side request forgery in Apache Impala versions 4.4.x and 4.5.x.  Authenticated Impala users with permissions to execute the ai_generate_text() function can exfiltrate secrets provided by the credential providers configured in the `hadoop.security.crede…

    Apache Software Foundation Apache Impala