CVE-2026-54048: Apache Impala: Avro Schema URL Server-Side Request Forgery
Apache Impala CVE-2026-54048 lets crafted Avro schema URLs trigger SSRF to internal endpoints, with responses potentially leaking via error messages.
A server-side request forgery in Apache Impala 2.0.0 through 4.5.1 on all platforms can be triggered via an Avro schema URL using an http or file:/// URI on a table. An attacker can cause Impala to send GET requests to internal endpoints it can access, and responses may be exposed through parsing error messages. Users are advised to upgrade to a fixed release.
- SSRF via Avro schema URLs affects Impala 2.0.0 through 4.5.1
- Supports both http and file:/// URIs
- Can reach internal endpoints not directly accessible to the attacker
- Responses may leak through parsing error messages
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-54048 | Server-Side Request Forgery in Apache Impala via Avro Schema URL | 5.3 | <1% |
From the original article
Posted by Michael Smith on Sep 08 Severity: important http://...' ) or with a 'file:///' URI on a table in Impala 2. 0.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.