CVE-2026-108780 PUBLISHED

Apache Kylin: Potential JDBC source configuration validation issue

Assigner: apache
Reserved: 11.10.2026 Published: 19.10.2026 Updated: 19.10.2026

Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network.

This issue affects Apache Kylin: from 4.0.0 through 5.0.4.

Users are recommended to upgrade to version 5.0.5, which fixes the issue.

Product Status

Vendor Apache Software Foundation
Product Apache Kylin
Versions Default: unaffected
  • affected from 4.0.0 to 5.0.4 (incl.)

Credits

  • An academic team studying incomplete security fixes finder

References