PT-2026-58018 · Apache · Apache Kylin+1

Haoran Zhao + 2 · Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-62393

Mitre

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects.

This issue affects Apache Kylin: from 4 through 5.0.3.

Users are recommended to upgrade to version 5.0.4, which fixes the issue.

Fix

Weakness Enumeration

CWE-280

Related Identifiers

CVE-2026-62393

Affected Products

Apache Kylin

Kylin

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-62393 · Security Note
• https://lists.apache.org/thread/xg8dcyjw0nkq5y8dhq3r25x3rxc62x9j · Vendor Advisory
• http://openwall.com/lists/oss-security/2026/07/14/6 · Note