Skip to content

CVE record · 1 source

CVE-2026-108762

Path-confinement bypass during metadata backup deletion in Apache Kylin.

Vendor: Apache Software Foundation
Product: Superset / Druid / Spark / Hadoop / Hive
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 12d ago

Path-confinement bypass during metadata backup deletion in Apache Kylin.

Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This…

Fix available CVE-2026-108762 Apache Software Foundation