CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-68572: Apache Kylin: Unauthorized SQL execution to Spark SQL env

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10464

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-68572: Apache Kylin: Unauthorized SQL execution to Spark SQL env

CVE-2026-68572 is an exposure of sensitive information vulnerability in Apache Kylin versions 4.0.0 through 5.0.4 that permits unauthorized SQL execution to the Spark SQL environment. The vulnerability allows attackers to access sensitive data without proper authorization. Apache has released version 5.0.5 to remediate the issue.

Why it matters: Organizations running Apache Kylin 4.0.0 through 5.0.4 face direct risk of unauthorized SQL execution and data exposure; upgrade to 5.0.5 immediately.

CVEsCVE-2026-68572
VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary