CVE-2026-57866

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

CVE-2026-57866

Apache Impala versions 4.4.x and 4.5.x are vulnerable to a Server Side Request Forgery (SSRF) . Authenticated users authorized to execute the ai_generate_text() function can exfiltrate secrets from credential providers defined in the hadoop.security.credential.provider.path property of core-site....

CVE-2026-57866 Apache Impala: Secrets Exfiltration via SSRF

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

EUVD-2026-74799

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

CVE-2026-57866: Server-Side Request Forgery (SSRF)

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...