Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

CVE-2026-57866: Apache Impala: Secrets Exfiltration via SSRF

oss-security ()2
Read at seclists.org
Part of a story covered by 3 sourcesApache Impala hit by three same-day CVEs: critical SAML auth bypass, SSRF secrets exfiltration, and RCE via external data source class loadingMerged summary & timeline
AI summary · glm-5.3-flashSummaries by Vani AI

Apache Impala CVE-2026-57866 lets authenticated users abuse ai_generate_text() to exfiltrate secrets from configured Hadoop credential providers via SSRF.

A server-side request forgery affects Apache Impala versions 4.4.0 through 4.5.1. Authenticated users with permission to execute the ai_generate_text() function can exfiltrate secrets provided by credential providers configured via hadoop.security.credential.provider.path in core-site.xml. The attacker must know the secret's key name, and Apache rates the issue 'important'.

Key facts
  • SSRF affects Impala 4.4.0 through 4.5.1
  • Requires permission to execute the ai_generate_text() function
  • Exfiltrates secrets from the Hadoop credential provider path
  • Attacker must already know the secret's key name
Analyze CVE-2026-57866 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-57866
Tags
apachecredential-theftimpalassrfvulnerability
Vendors
Apache
Products
Apache ImpalaHadoop

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-57866
SSRF in Apache Impala lets authenticated users exfiltrate credential-provider secrets
8.8<1%

From the original article

Posted by Michael Smith on Sep 08 Severity: important Affected versions: - Apache Impala 4. 4. 0 through 4.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.