OS Command Injection Vulnerability in Apache Kylin Affecting Multiple Versions

CVE-2026-108743

What is CVE-2026-108743?

A security flaw in Apache Kylin introduces an OS Command Injection vulnerability that could allow attackers to execute arbitrary commands. This flaw primarily impacts Kylin services exposed to the public network, although many in-house deployments are generally not at risk. Users running versions 4.0.4 through 5.0.4 are advised to upgrade to version 5.0.5 to remediate this vulnerability effectively.

References