As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-78243: Apache YuniKorn: LDAP Group provider panics on lowercase attribute name
Apache YuniKorn versions 1.8.0 through 1.10.0 crash when the LDAP group provider encounters a lowercase memberOf attribute name during group membership processing. The vulnerability results from an out of bounds read that occurs only when an LDAP server returns group membership entries with specific attribute formatting. Systems running affected versions with LDAP group resolution enabled are susceptible to denial of service.
Why it matters: Platform and infrastructure teams running YuniKorn 1.8.0 to 1.10.0 with LDAP authentication must upgrade to patch availability of service crashes, particularly in Kubernetes environments where YuniKorn manages resource scheduling.
- Source published
- First seen by Cybersecurity Tracker