Skip to content

CVE record · 1 source

CVE-2026-73322

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot.

Vendor: Apache Software Foundation
Product: Apache Pinot
Weakness: CWE-863
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

16

CVE NVD 38h ago

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot.

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled, the single-stage query engine authorizes only the table named in the query's FROM clause. The lookup()…

Fix available CVE-2026-73322 Apache Software Foundation