CVE-2026-97720

Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tokens. Bearer token JWT signatures are...

EUVD-2026-94222

Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tokens. Bearer token JWT signatures are...

CVE-2026-97720

Apache Impala versions up to and including 4.5.2 are vulnerable to an authentication bypass in the Impala executor webserver . The root cause is an incorrect implementation of JWT/OAuth authentication where Bearer token signatures are not validated , allowing an attacker to access resources serve...