Live › vulnerability › CVE-2026-68573
Go to dashboardApache Kylin versions 4 through 5.0.4 have an authentication flaw that lets an unauthenticated user trigger system cleanup actions. An attacker who can reach a Kylin service can make it delete or clean up its own data or metadata without logging in.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed Kylin version (Kylin 4.x through 5.0.4 are affected).
5.0.5Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cleanup actions. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.
This issue affects Apache Kylin: from 4 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-68573")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.