CVE-2026-69080 Apache Kylin: Broken Access Control in QuerySQLBlacklistController

Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-69080

Apache Kylin versions 4 through 5.0.4 are affected by a broken access control vulnerability in the QuerySQLBlacklistController . This flaw allows an unauthorized actor to access the SQL Black List , potentially leading to the exposure of sensitive information (CWE-200). To mitigate this issue, us...