Live › vulnerability › CVE-2026-69076
Go to dashboardApache Kylin versions 4 through 5.0.4 let an unauthorized actor discard jobs because the job discard action is not properly access-checked. An attacker who can reach a publicly exposed Kylin service can stop or remove its build jobs.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only Kylin services directly exposed to the public network are at meaningful risk, according to the sources. In-house deployments reachable only from internal networks are mostly not impacted. Teams running Kylin 4 through 5.0.4 behind a firewall can prioritise the upgrade lower.
No product ranges from the sources yet.
4.x and 5.0.45.0.5Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.
This issue affects Apache Kylin: from 4 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-69076")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.