Apache Pinot < 1.3.0 - Authentication Bypass

This vulnerability allows remote attackers to bypass authentication on affected installations of Apache Pinot. Authentication is not required to exploit this vulnerability.The specific flaw exists within the AuthenticationFilter class. The issue results from insufficient neutralization of special...

GHSA-WC96-39FC-566F vulnerabilities

Vulnerabilities for packages: cassandra, apache-hop, pinot-fips, seata, thingsboard, cassandra-fips, pinot, tez, management-api-for-apache-cassandra-5.0, apache-hop-fips...

GHSA-G7HG-VRCF-MVMR vulnerabilities

Vulnerabilities for packages: cassandra, apache-hop, pinot-fips, seata, thingsboard, cassandra-fips, pinot, tez, management-api-for-apache-cassandra-5.0, apache-hop-fips...

CVE-2026-56820 vulnerabilities

Vulnerabilities for packages: cassandra, apache-hop, pinot-fips, seata, thingsboard, cassandra-fips, pinot, tez, management-api-for-apache-cassandra-5.0, apache-hop-fips...

GHSA-272M-GCWP-MPWG vulnerabilities

Vulnerabilities for packages: cassandra, apache-hop, pinot-fips, seata, thingsboard, cassandra-fips, pinot, tez, management-api-for-apache-cassandra-5.0, apache-hop-fips...

CVE-2026-56821 vulnerabilities

Vulnerabilities for packages: cassandra, apache-hop, pinot-fips, seata, thingsboard, cassandra-fips, pinot, tez, management-api-for-apache-cassandra-5.0, apache-hop-fips...

CVE-2026-56822 vulnerabilities

Vulnerabilities for packages: cassandra, apache-hop, pinot-fips, seata, thingsboard, cassandra-fips, pinot, tez, management-api-for-apache-cassandra-5.0, apache-hop-fips...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: apache-hop, spark-kubernetes-operator, spark-kubernetes-operator-fips, spark-fips, confluent-kafka, apache-hop-fips, confluent-kafka-jre-bcfips, druid, hadoop-client-modules, kafka, hadoop-fips, spark, zookeeper, tez, pinot-fips, apache-camel-karavan-devmode,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: apache-hop, spark-kubernetes-operator, spark-kubernetes-operator-fips, spark-fips, confluent-kafka, apache-hop-fips, confluent-kafka-jre-bcfips, druid, hadoop-client-modules, kafka, hadoop-fips, spark, zookeeper, tez, pinot-fips, apache-camel-karavan-devmode,...

GHSA-VHCH-2WF3-M8RP vulnerabilities

Vulnerabilities for packages: celeborn, apache-hop, trino, pinot-fips, seata, thingsboard, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, pinot, tez, management-api-for-apache-cassandra-4.1, apache-hop-fips...

CVE-2026-44891 vulnerabilities

Vulnerabilities for packages: celeborn, apache-hop, trino, pinot-fips, seata, thingsboard, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, pinot, tez, management-api-for-apache-cassandra-4.1, apache-hop-fips...

PYSEC-2026-410 mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

Resolution Fixed in v3.1.0, released 2026-05-25. The fix was merged in PR 95 at commit 1c7d3f9. The fix changes the default HTTP bind host to 127.0.0.1, refuses non-loopback HTTP/HTTPS exposure unless OAuth is enabled, makes Helm exposure opt-in and OAuth-gated, and adds parser-backed...

PYSEC-2026-267 OS Command Injection in Apache Airflow

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Apache Airfl...

Improper Access Control

mcppinotserver is vulnerable to Improper Access Control. The vulnerability is due to the MCP server defaulting to an unauthenticated HTTP service bound to 0.0.0.0:8080, which allows an attacker on the network to access MCP tools and exploit the server's Pinot credentials to execute unauthorized S...

EUVD-2026-37951

mcp-pinot: Unauthenticated tool invocation via default oauthenabled=False + host 0.0.0.0 bind...

GHSA-73CV-556C-W3G6 mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

Resolution Fixed in v3.1.0, released 2026-05-25. The fix was merged in PR 95 at commit 1c7d3f9. The fix changes the default HTTP bind host to 127.0.0.1, refuses non-loopback HTTP/HTTPS exposure unless OAuth is enabled, makes Helm exposure opt-in and OAuth-gated, and adds parser-backed...

CVE-2026-49257

mcp-pinot is a Python-based Model Context Protocol MCP server for interacting with Apache Pinot. In versions 3.0.1 and below, mcp-pinot defaults to running an HTTP MCP server bound to 0.0.0.0:8080 with no authentication enabled. All MCP tools, including SQL query execution, schema creation, and...

CVE-2026-49257

mcp-pinot is a Python-based Model Context Protocol MCP server for interacting with Apache Pinot. In versions 3.0.1 and below, mcp-pinot defaults to running an HTTP MCP server bound to 0.0.0.0:8080 with no authentication enabled. All MCP tools, including SQL query execution, schema creation, and...

CVE-2026-49257

Summary of CVE-2026-49257 – mcp-pinot : Versions 3.0.1 and earlier run an HTTP MCP server bound to 0.0.0.0:8080 with no authentication, exposing all MCP tools (SQL query execution, schema creation, table-config mutation) to any network-adjacent caller. The server proxies these calls using server-...

CVE-2026-49257 mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

mcp-pinot is a Python-based Model Context Protocol MCP server for interacting with Apache Pinot. In versions 3.0.1 and below, mcp-pinot defaults to running an HTTP MCP server bound to 0.0.0.0:8080 with no authentication enabled. All MCP tools, including SQL query execution, schema creation, and...