Skip to content
OpenAdvisories
High · 7.5 CVE-2026-63618 EUVD-2026-102851GHSA-v48x-mj6h-5gwj

Apache Kylin: Low-Privilege Config Exposure

Published Oct 16, 2026 · Updated Oct 16, 2026 · Assigned by apache

Description

Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4 through 5.0.4.

Users are recommended to upgrade to version 5.0.5, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Kylin 4..0.0 – ≤ 5.0.4 —

References