CVE-2026-69080 Apache Kylin: Broken Access Control in QuerySQLBlacklistController
HighCVSS 7.5
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin.
This issue affects Apache Kylin: from 4 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Kylin | >= 4..0.0, <= 5.0.4 | No fix listed |
References
- lists.apache.org vendor-advisory
- www.openwall.com