Insufficient Authorization Vulnerability in Impala by Apache
CVE-2026-65181

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Impala
Vendor
CVE Published:
9 September 2026

What is CVE-2026-65181?

This vulnerability in Apache Impala versions 2.7 through 4.5 allows attackers with certain privileges to bypass access controls. This can lead to unauthorized file uploads to remote storage and the potential execution of arbitrary Java code. It is essential for users to update to version 4.5.2, which addresses this security issue effectively.

Affected Version(s)

Apache Impala 2.7.0 <= 4.5.1

References

https://lists.apache.org/thread/2ty3srsh96j86xxg4g1hbo5rw...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

zhaokaifei ChinaTelecom
.