Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.
This issue affects Apache Kylin: from 4.0.0 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
References
Configurations
No configuration.
History
30 Oct 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
19 Oct 2026, 11:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
19 Oct 2026, 10:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-19 10:16
Updated : 2026-10-30 17:17
NVD link : CVE-2026-108764
Mitre link : CVE-2026-108764
CVE.ORG link : CVE-2026-108764
JSON object : View
Products Affected
No product.
CWE
CWE-918
Server-Side Request Forgery (SSRF)