Code Injection Vulnerability in Apache Kylin by The Apache Software Foundation

CVE-2026-68571

What is CVE-2026-68571?

A code injection vulnerability in Apache Kylin arises when a specially crafted parameter in the JDBC URL allows unauthorized code to be executed. While the threat primarily affects Kylin services that are directly accessible via the public network, most in-house deployments remain unaffected. To mitigate this risk, users should upgrade to version 5.0.5 or higher, which addresses the vulnerability.

References