CVE-2026-97720

Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tokens. Bearer token JWT signatures are...

EUVD-2026-94222

Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tokens. Bearer token JWT signatures are...

CVE-2026-97720

Apache Impala versions up to and including 4.5.2 are vulnerable to an authentication bypass in the Impala executors due to an incorrect implementation of JWT/OAuth authentication . Specifically, the system fails to validate Bearer token (JWT) signatures , causing the executor's webserver to accep...

CVE-2026-97720: Incorrect Implementation of Authentication Algorithm

Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tokens. Bearer token JWT signatures are...

JWT / OAuth Misconfiguration Probe

Probe API surfaces for JWT alg=none, weak secrets, OAuth callback open redirects, and missing state parameter enforcement. !/usr/bin/env python3 -- coding: utf-8 -- """ JWT and OAuth/OIDC misconfiguration probe. Detects alg=none, weak HMAC secrets, expired-signature acceptance, open redirects in...