Skip to content
OpenAdvisories
High · 7.5 CVE-2026-69080 EUVD-2026-103152GHSA-2q75-3h97-94cq

Apache Kylin: Broken Access Control in QuerySQLBlacklistController

Published Oct 16, 2026 · Updated Oct 20, 2026 · Assigned by apache

Description

Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4 through 5.0.4.

Users are recommended to upgrade to version 5.0.5, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Kylin 4..0.0 – ≤ 5.0.4 —

References