CVE-2026-108780: Apache Kylin: Potential JDBC source configuration validation issue
Apache Kylin 4.0.0–5.0.4 has a minor JDBC validation flaw fixed in 5.0.5.
Apache Kylin 4.0.0 through 5.0.4 has a JDBC source configuration validation issue tracked as CVE-2026-108780 and KYLIN-6111. The project rates it moderate and says impact is minor unless Kylin backend services are exposed to the public network. Users are advised to upgrade to 5.0.5. No exploitation is reported.
- JDBC source validation flaw in Kylin 4.0.0 through 5.0.4.
- Impact is minor unless backend services face the public network.
- Upgrade to Apache Kylin 5.0.5; tracked as KYLIN-6111.
Vulnerabilities mentionedAll →
- published —
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-108780 | NVD description · AI analysis pending | — | — | — | — | — |
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue. This issue is being tracked as KYLIN-6111 Credit: An...
This source does not provide full text. Read it at seclists.org.