As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-108833: Apache Kylin: default startup profile miss security settings
A low-severity vulnerability in Apache Kylin versions 4.0.0 through 5.0.4 stems from a default startup profile that omits security settings. Deployments with security settings explicitly enabled are not affected. Apache recommends upgrading to version 5.0.5 to remediate the issue.
Why it matters: Kylin administrators running versions 4.0.0 through 5.0.4 with default configurations should evaluate their deployment settings and upgrade to 5.0.5 to ensure security baselines are enforced.
- Source published
- First seen by Cybersecurity Tracker