CVE-2026-55976

This is a Server-Side Request Forgery (SSRF) vulnerability in Avro SerDe schema resolution in Apache Hive versions before 4.2.1 . The root cause is insufficient input validation on the avro.schema.url table property. An authenticated remote attacker with CREATE TABLE privilege can craft an Avro t...

EUVD-2026-65395

Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...