CVE-2026-57866

Apache Impala versions 4.4.x and 4.5.x contain a server-side request forgery (CWE-918) in the ai_generate_text() SQL function. An authenticated Impala user with permission to execute ai_generate_text() can trigger server-side requests that exfiltrate secrets supplied by the credential providers configured in the hadoop.security.credential.provider.path property of core-site.xml, provided the user already knows the secret's key name. Successful exploitation lets an attacker read sensitive credentials held by the Impala service, such as storage or cloud keys, potentially enabling follow-on access to the systems those credentials protect. Only deployments running Impala 4.4.x or 4.5.x that have credential providers configured and permit users to call the affected function are exposed. There is no CVSS score yet, no known public proof-of-concept, and no evidence of exploitation in the wild; the issue is not on the CISA KEV list.

What to do: Audit whether your Impala 4.4.x/4.5.x clusters configure hadoop.security.credential.provider.path in core-site.xml and restrict execution rights on ai_generate_text() to trusted users, while limiting their knowledge of secret key names. Upgrade to a patched Apache Impala release as soon as the Apache security team announces one, since no fixed version is identified in the available data.