As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-56207: Apache Impala: SAML authentication bypass via forged bearer token
Apache Impala versions 4.0.0 through 4.5.1 contain a critical authentication bypass in SAML2 authentication for the hs2-http interface due to missing bearer token signature verification. An attacker can forge tokens to alter usernames and impersonate other users. The vulnerability is resolved in Apache Impala 4.5.2.
Why it matters: Organizations running Impala 4.0.0 through 4.5.1 with SAML authentication face immediate risk of account impersonation and unauthorized data access; patch or upgrade to 4.5.2 now.
- Source published
- First seen by Cybersecurity Tracker