JDBC Source Configuration Validation Vulnerability in Apache Kylin by Apache
CVE-2026-108780

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Kylin
Vendor
CVE Published:
19 October 2026

What is CVE-2026-108780?

A potential vulnerability exists in the JDBC source configuration validation within Apache Kylin. If backend services are exposed to public networks, this validation weakness could be exploited, leading to unauthorized access or data leakage. Users are advised to upgrade to version 5.0.5 to mitigate this concern and enhance their security posture.

Affected Version(s)

Apache Kylin 4.0.0 <= 5.0.4

References

https://lists.apache.org/thread.html/vyc83rb5t0f4nyvn1dzg...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

An academic team studying incomplete security fixes
.