Exposure of Sensitive Information in Apache Kylin by Apache
CVE-2026-63618

Currently unrated

Key Information:

Vendor: Apache
Status: Apache Kylin
Vendor: CVE Published:; 16 October 2026

What is CVE-2026-63618?

A vulnerability exists in Apache Kylin that allows unauthorized actors to access sensitive system-level configuration information. This exposure can potentially lead to further exploits or unauthorized use of the system. The affected versions range from 4.0.0 to 5.0.4. Users are advised to upgrade to version 5.0.5 to mitigate this issue.

Affected Version(s)

Apache Kylin 4..0.0 <= 5.0.4

References

https://lists.apache.org/thread.html/5zrg002omkynt3hsjobv...

vendor-advisory

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 16, 2026
Vulnerability Reserved
Jul 17, 2026

Credit

IcySun <icysun@qq.com>

"George Chen" <http://github.com/geo-chen>

CVE-2026-63618 Data

JSON