You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@kylin.apache.org by Li Yang <li...@apache.org> on 2026/10/16 03:10:21 UTC

CVE-2026-108780: Apache Kylin: Potential JDBC source configuration validation issue

Severity: moderate 

Affected versions:

- Apache Kylin 4.0.0 through 5.0.4

Description:

Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network.



This issue affects Apache Kylin: from 4.0.0 through 5.0.4.



Users are recommended to upgrade to version 5.0.5, which fixes the issue.

This issue is being tracked as KYLIN-6111 

Credit:

An academic team studying incomplete security fixes (finder)

References:

https://kylin.apache.org/
https://www.cve.org/CVERecord?id=CVE-2026-108780
https://issues.apache.org/jira/browse/KYLIN-6111