SAML2 Authentication Vulnerability in Apache Impala

CVE-2026-56207

What is CVE-2026-56207?

A vulnerability in Apache Impala's SAML2 authentication process permits an attacker to bypass signature verification of Bearer tokens during the final step of authentication. This oversight can lead to unauthorized user impersonation, allowing the attacker to alter the user name and act as another legitimate user. It is highly recommended that users upgrade to version 4.5.2 to mitigate this security risk.

References