CVE-2026-108764: Apache Kylin: job-driver UI proxy SSRF
Apache Kylin 4.0.0 through 5.0.4 has a moderate job-driver SSRF flaw, fixed in 5.0.5.
Apache disclosed CVE-2026-108764, a moderate server-side request forgery flaw in the Apache Kylin job-driver UI proxy. It affects Kylin 4.0.0 through 5.0.4, with the greatest impact on job services exposed to the public internet, which Apache says is uncommon. Users are advised to upgrade to 5.0.5. No exploitation is reported.
34