CVE-2026-57866

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

CVE-2026-57866

Apache Impala versions 4.4.x and 4.5.x are affected by a server-side request forgery (SSRF) vulnerability. Authenticated users with permission to execute the ai_generate_text() function can exfiltrate secrets stored in credential providers configured via the hadoop.security.credential.provider.pa...

EUVD-2026-74799

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...