CVE-2026-63619

Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This...

CVE-2026-63619

Apache Kylin versions 4 through 5.0.4 are vulnerable to a Missing Authorization vulnerability (CWE-862). The issue stems from a backend metadata dump API that lacks sufficient authorization and path-confinement . This vulnerability primarily impacts instances directly exposed to the public networ...

EUVD-2026-102852

Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This...