CVE-2026-73322 Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled, the single-stage query engine authorizes only the table named in the query's FROM clause. The lookup transform function identifies its dimension table with a string liter...

CVE-2026-73322

Apache Pinot versions through 1.5.1 are vulnerable to an incorrect authorization flaw in the single-stage query engine . When broker access control is enabled, the engine only authorizes tables explicitly named in the FROM clause. However, the lookup() transform function uses a string literal arg...