Live › vulnerability › CVE-2026-69077
Go to dashboardApache Kylin versions 4 through 5.0.4 let a user manipulate jobs belonging to other projects without authorization. The description says the impact is mostly on Kylin services directly exposed to the public network.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Apache Kylin from 4 through 5.0.4, especially where the Kylin service is directly reachable from the public internet. The description says in-house deployments are mostly not impacted. Teams on 5.0.5 or later are not affected.
No product ranges from the sources yet.
4.x through 5.0.4.5.0.5.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.
This issue affects Apache Kylin: from 4 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-69077")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.