As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-68573: Apache Kylin: Unauthenticated Metastore Cleanup
Apache Kylin versions 4.0.0 through 5.0.4 contain an improper authentication vulnerability that allows unauthenticated users to access system cleanup actions. The risk is elevated primarily for Kylin deployments directly exposed to public networks, while internal deployments face lower exposure. Users are advised to upgrade to a patched version.
Why it matters: Organizations running Kylin 4.x or 5.x with public-facing instances should prioritize patching to prevent unauthorized disruption of metastore cleanup operations and potential data integrity issues.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-68573: Apache Kylin: Unauthenticated Metastore Cleanup
CVE-2026-68573 is an improper authentication vulnerability in Apache Kylin versions 4.0.0 through 5.0.4 that allows unauthenticated users to access system cleanup actions. The exposure is most significant for Kylin services directly exposed to public networks, while in-house deployments face lower risk. Affected users should upgrade to a patched version.
Why it matters: Organizations running Apache Kylin 4.x or 5.0.x with public internet exposure need to evaluate and patch immediately, as unauthenticated attackers can trigger system cleanup operations; in-house deployments are lower priority.
- Source published
- First seen by Cybersecurity Tracker