CVE-2026-108833 — Apache Kylin: default startup profile miss security settings

CVE-2026-108833

Apache Kylin: default startup profile miss security settings PUBLISHED

Description (CNA)

Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Kylin	affected 4.0.0 through 5.0.4

CWE

No CWE identifiers supplied.

References

https://lists.apache.org/thread.html/lqb36tsyp3fdsg5x4qvz4fy3hkzcr2wz

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/10/16/20