CVE-2026-56207: Apache Impala: SAML authentication bypass via forged bearer token
Apache Impala CVE-2026-56207 allows forged SAML bearer tokens on the hs2-http interface, letting attackers impersonate other users; fixed in 4.5.2.
Apache Impala versions 4.0.0 through 4.5.1 fail to verify the bearer token signature in the final step of SAML2 authentication for the hs2-http interface. An attacker can alter the username and act as another user. Users are recommended to upgrade to version 4.5.2, and Apache rated the issue critical. It was reported by Andrew Rukin of Arenadata.
- Bearer token signature is not verified in the SAML2 authentication flow
- Affects Impala 4.0.0 through 4.5.1 on the hs2-http interface
- Allows impersonation of arbitrary users by altering the username
- Fixed in Apache Impala 4.5.2
- CVEs
- CVE-2026-56207
- Products
- Apache Impala
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-56207 | SAML2 authentication bypass in Apache Impala hs2-http via unverified bearer token | 9.8 | <1% |
From the original article
Posted by Michael Smith on Sep 08 Severity: critical Affected versions: - Apache Impala 4. 0. 0 through 4.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.