Resource Exhaustion Vulnerability in Apache Kylin by Apache
CVE-2026-108837

Currently unrated

Key Information:

Vendor: Apache
Status: Apache Kylin
Vendor: CVE Published:; 19 October 2026

What is CVE-2026-108837?

A vulnerability exists in Apache Kylin that allows an attacker with project admin privileges to exploit the cache API, potentially leading to resource exhaustion through uncontrolled allocation of resources. This issue affects several versions from 4.0.0 to 5.0.4. Users are strongly advised to upgrade to version 5.0.5 to mitigate the risk associated with this vulnerability.

Affected Version(s)

Apache Kylin 4.0.0 <= 5.0.4

References

https://lists.apache.org/thread.html/qgpgkx6zh37tlys28qly...

vendor-advisory

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 19, 2026
Vulnerability Reserved
Oct 11, 2026

Credit

HRsGIT (https://github.com/HRsGIT)

CVE-2026-108837 Data

JSON