CVE-2026-57866

A Server Side Request Forgery (SSRF) vulnerability in Apache Impala versions 4.4.x and 4.5.x allows authenticated users with permission to execute the ai_generate_text() function to exfiltrate secrets stored in credential providers configured via the hadoop.security.credential.provider.path prope...

CVE-2026-65181

Apache Impala versions 2.7 through 4.5 are affected by an insufficient authorization flaw in Data Source tables that enables remote code execution (RCE) via external data source class loading . A client with existing privileges can upload a file to remote storage and create a table, which trigger...