CVE-2026-108780: Apache Kylin: Potential JDBC source configuration validation issue
Apache Kylin 4.0.0–5.0.4 has a minor JDBC validation flaw fixed in 5.0.5.
Apache Kylin 4.0.0 through 5.0.4 has a JDBC source configuration validation issue tracked as CVE-2026-108780 and KYLIN-6111. The project rates it moderate and says impact is minor unless Kylin backend services are exposed to the public network. Users are advised to upgrade to 5.0.5. No exploitation is reported.
24