CVE-2026-108780 — Apache Kylin: Potential JDBC source configuration validation issue

CVE-2026-108780

Apache Kylin: Potential JDBC source configuration validation issue PUBLISHED

Description (CNA)

Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Kylin	affected 4.0.0 through 5.0.4

CWE

No CWE identifiers supplied.

References

https://lists.apache.org/thread.html/vyc83rb5t0f4nyvn1dzggshcqdqf9lj0

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/10/16/18