Skip to content
OpenAdvisories
High · 7.5 CVE-2026-68572 EUVD-2026-103147GHSA-4h4c-qxh3-jw66

Apache Kylin: Unauthorized SQL execution to Spark SQL env

Published Oct 16, 2026 · Updated Oct 20, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Kylin

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4 through 5.0.4.

Users are recommended to upgrade to version 5.0.5, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Kylin 4..0.0 – ≤ 5.0.4 —

References