CVE-2026-108780: Apache Kylin: Potential JDBC source configuration validation issue
Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network.
This issue affects Apache Kylin: from 4.0.0 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Kylinto a version that resolves this vulnerability.Fixed in 5.0.5
Event History
Frequently Asked Questions
Which deployments face the greatest exposure?
Deployments where Kylin backend services are reachable from the public network have the greatest exposure. The stated impact is minor otherwise.
What versions need to be remediated?
Apache Kylin versions from 4.0.0 through 5.0.4 are affected. Upgrade to version 5.0.5, which fixes the issue.
What can reduce risk before upgrading?
Avoid exposing Kylin backend services to the public network. Restricting their network accessibility reduces the exposure described for this issue.