Live › vulnerability › CVE-2026-108833
Go to dashboardApache Kylin's default startup profile leaves out security settings, so a default deployment runs without them. The sources do not say what an attacker can do beyond that, and the description does not name the specific missing settings.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Apache Kylin deployments from 4.0.0 through 5.0.4 that run on the default startup profile without the security settings profile enabled are affected. Deployments that already have the security settings profile turned on are not affected, and the sources do not say more about exposure.
No product ranges from the sources yet.
unknown if the sources do not give a command.5.0.5, which the sources say fixes the issue.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact.
This issue affects Apache Kylin: from 4.0.0 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-108833")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.