CVE-2026-63619

Apache Kylin versions 4 through 5.0.4 are vulnerable to a Missing Authorization vulnerability (CWE-862). The issue stems from a backend metadata dump API that lacks sufficient authorization and path-confinement . This vulnerability primarily impacts instances directly exposed to the public networ...