Skip to content
OpenAdvisories
High · 7.5 CVE-2026-108833 EUVD-2026-104148GHSA-h834-34fg-fmfp

Apache Kylin: default startup profile miss security settings

Published Oct 19, 2026 · Updated Nov 9, 2026 · Assigned by apache

Description

Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact.

This issue affects Apache Kylin: from 4.0.0 through 5.0.4.

Users are recommended to upgrade to version 5.0.5, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Kylin 4.0.0 – ≤ 5.0.4 —

References