CVE-2026-62393: Apache Kylin: Improper authorization in job information retrieval
Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects.
This issue affects Apache Kylin: from 4 through 5.0.3.
Users are recommended to upgrade to version 5.0.4, which fixes the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Kylinto a version that resolves this vulnerability.Fixed in 5.0.4
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62393?
The severity of CVE-2026-62393 is medium with a CVSS score of 4.3.
What is CVE-2026-62393?
CVE-2026-62393 is a vulnerability in Apache Kylin that involves improper authorization in job information retrieval, allowing unauthorized access to jobs in other projects.
How do I fix CVE-2026-62393?
To fix CVE-2026-62393, users are recommended to upgrade Apache Kylin to the latest version beyond 5.0.3.
What versions of Apache Kylin are affected by CVE-2026-62393?
CVE-2026-62393 affects Apache Kylin versions from 4 through 5.0.3.
Can CVE-2026-62393 lead to data exposure?
Yes, CVE-2026-62393 can potentially lead to unauthorized access to job data, resulting in data exposure.