Live › vulnerability › CVE-2026-108823
Go to dashboardApache Kylin versions 4.0.0 through 5.0.4 expose sensitive information to an unauthorized actor during job manipulation. The impact is described as minor unless job services are reachable from the public network.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Apache Kylin 4.0.0 through 5.0.4. The description says the impact is minor unless job services are exposed to the public network, which it calls uncommon. Teams that keep Kylin job services on a private network face a lower risk, but the sources do not say whether that reduces exposure to zero.
No product ranges from the sources yet.
4.0.0 through 5.0.45.0.5Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. The impact is minor unless job services are exposed to public network, which is uncommon.
This issue affects Apache Kylin: from 4.0.0 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-108823")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.