CVE-2021-28131

CVE-2021-28131 (Impala): The vulnerability arises because a 16-byte session secret is logged, enabling an authenticated user to hijack another user’s session and execute statements with privileges not held. Affected deployments with Apache Sentry, Apache Ranger, or audit logging may face privileg...

CVE-2017-5640

CVE-2017-5640 affects Apache Impala (incubating) versions 2.7.0–2.8.0. A malicious process impersonating an Impala daemon can cause the server to skip authentication checks when Kerberos is enabled but TLS is not, by replying with COMPLETE before the SASL handshake finishes, making the client tre...

CVE-2017-5652

The CVE-2017-5652 entry concerns Apache Impala (incubating) versions 2.7.0–2.8.0 where one port used by the StatestoreSubscriber did not employ the secure Thrift transport when TLS was enabled. This allowed an attacker with network access to eavesdrop on plaintext data traversing that port, const...

CVE-2019-10084

CVE-2019-10084 affects Apache Impala 2.7.0 to 3.2.0. An authenticated user who can observe the IDs of active queries or sessions can craft requests to interact with those sessions/queries, potentially bypassing authorization and audit controls. Root causes noted include: session/query IDs are uni...

CVE-2017-9792

CVE-2017-9792 affects Apache Impala (incubating) before 2.10.0. A user with ALTER privileges on an Impala table can bypass authorization by turning a non-external Kudu table into external mode and altering the underlying mapping to point at other Kudu tables, potentially accessing data across tab...

CVE-2018-11792

CVE-2018-11792 affects Apache Impala up to version 3.0.1. The issue occurs when performing ALTER TABLE/VIEW RENAME, which requires ALTER on the old table. This can enable privilege escalation: if a user has ALTER on a table and ALL on the database, they can move the table to a database with ALL, ...

CVE-2018-11785

CVE-2018-11785 affects Apache Impala versions prior to 3.0.1 where a missing authorization check allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, resulting in incorrect query results. The connected CNVD/OSV/NVD records corroborate the lack of autho...

CVE-2026-57866

Apache Impala versions 4.4.x and 4.5.x are vulnerable to a Server Side Request Forgery (SSRF) . Authenticated users authorized to execute the ai_generate_text() function can exfiltrate secrets from credential providers defined in the hadoop.security.credential.provider.path property of core-site....

CVE-2026-65181

Apache Impala versions 2.7.0 through 4.5.1 are vulnerable to an insufficient authorization flaw that can lead to remote code execution (RCE) . The issue stems from the fact that the driver.url and driver.class properties used in tables created with STORED BY JDBC are not checked for authorization...

CVE-2026-56207

The Apache Impala software (version >=4.0.0 ) is vulnerable to an authentication bypass because the signature of the Bearer token is not verified during the final step of SAML2 authentication within the hs2-http interface . This flaw allows an attacker to alter the username and impersonate ano...

CVE-2026-54048

Apache Impala versions 2.0.0 through 4.5.1 are vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists because specifying tblproperties('avro.schema.url'=' http://...') or a file:/// URI on a table allows an attacker to trigger a GET request to internal endpoints that the Impala serv...