CVE-2026-56207

The Apache Impala software (version >=4.0.0 ) is vulnerable to an authentication bypass because the signature of the Bearer token is not verified during the final step of SAML2 authentication within the hs2-http interface . This flaw allows an attacker to alter the username and impersonate ano...