agentprime: apache-software-foundation-apache-kylinEvery new CVE for apache-software-foundation-apache-kylin.https://agentprime.io/CVE-2026-108837: Apache Kylin: Potential computed-column resource exhaustionhttps://agentprime.io/advisories/CVE-2026-108837/https://agentprime.io/advisories/CVE-2026-108837/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:22:03 GMTCVECVE-2026-108833: Apache Kylin: default startup profile miss security settingshttps://agentprime.io/advisories/CVE-2026-108833/https://agentprime.io/advisories/CVE-2026-108833/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:21:54 GMTCVECVE-2026-108823: Apache Kylin: Potential unauthenticated job metadata replacementhttps://agentprime.io/advisories/CVE-2026-108823/https://agentprime.io/advisories/CVE-2026-108823/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:21:30 GMTCVECVE-2026-108780: Apache Kylin: Potential JDBC source configuration validation issuehttps://agentprime.io/advisories/CVE-2026-108780/https://agentprime.io/advisories/CVE-2026-108780/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:21:19 GMTCVECVE-2026-108776: Apache Kylin: tables/names SparkSQL injectionhttps://agentprime.io/advisories/CVE-2026-108776/https://agentprime.io/advisories/CVE-2026-108776/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:21:09 GMTCVECVE-2026-108771: Apache Kylin: unauthenticated broadcast API and polymorphic deserializationhttps://agentprime.io/advisories/CVE-2026-108771/https://agentprime.io/advisories/CVE-2026-108771/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:20:59 GMTCVEcriticalCVE-2026-108766: Apache Kylin: missing JDBC-config authorizationhttps://agentprime.io/advisories/CVE-2026-108766/https://agentprime.io/advisories/CVE-2026-108766/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:20:48 GMTCVECVE-2026-108764: Apache Kylin: job-driver UI proxy SSRFhttps://agentprime.io/advisories/CVE-2026-108764/https://agentprime.io/advisories/CVE-2026-108764/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:18:57 GMTCVECVE-2026-108762: Apache Kylin: delete metadata backup path-confinement bypasshttps://agentprime.io/advisories/CVE-2026-108762/https://agentprime.io/advisories/CVE-2026-108762/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 09:16:25 GMTCVECVE-2026-108743: Apache Kylin: spark job OS command injectionhttps://agentprime.io/advisories/CVE-2026-108743/https://agentprime.io/advisories/CVE-2026-108743/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:44:37 GMTCVECVE-2026-108709: Apache Kylin: Unauthenticated Metadata Broadcast (inside in-house network)https://agentprime.io/advisories/CVE-2026-108709/https://agentprime.io/advisories/CVE-2026-108709/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:38:21 GMTCVEcriticalCVE-2026-69080: Apache Kylin: Broken Access Control in QuerySQLBlacklistControllerhttps://agentprime.io/advisories/CVE-2026-69080/https://agentprime.io/advisories/CVE-2026-69080/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:37:50 GMTCVECVE-2026-69077: Apache Kylin: JobController allows unauthorized cross-project manipulationhttps://agentprime.io/advisories/CVE-2026-69077/https://agentprime.io/advisories/CVE-2026-69077/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:33:20 GMTCVECVE-2026-69076: Apache Kylin: Unauthorized cross-project job discardhttps://agentprime.io/advisories/CVE-2026-69076/https://agentprime.io/advisories/CVE-2026-69076/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:32:39 GMTCVECVE-2026-68573: Apache Kylin: Unauthenticated Metastore Cleanuphttps://agentprime.io/advisories/CVE-2026-68573/https://agentprime.io/advisories/CVE-2026-68573/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:32:22 GMTCVEcriticalCVE-2026-68572: Apache Kylin: Unauthorized SQL execution to Spark SQL envhttps://agentprime.io/advisories/CVE-2026-68572/https://agentprime.io/advisories/CVE-2026-68572/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:32:03 GMTCVECVE-2026-68571: Apache Kylin: JDBC URL Whitelist Verification Bypasshttps://agentprime.io/advisories/CVE-2026-68571/https://agentprime.io/advisories/CVE-2026-68571/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 12:16:12 GMTCVECVE-2026-64959: Apache Kylin: Missing authentication on certain cache API endpointshttps://agentprime.io/advisories/CVE-2026-64959/https://agentprime.io/advisories/CVE-2026-64959/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 12:16:00 GMTCVEcriticalCVE-2026-64610: Apache Kylin: Redis unsafe Java deserializationhttps://agentprime.io/advisories/CVE-2026-64610/https://agentprime.io/advisories/CVE-2026-64610/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 12:13:18 GMTCVEcriticalCVE-2026-63619: Apache Kylin: Missing authorization and path-confinement on system meta dumphttps://agentprime.io/advisories/CVE-2026-63619/https://agentprime.io/advisories/CVE-2026-63619/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 12:11:51 GMTCVEcriticalCVE-2026-63618: Apache Kylin: Low-Privilege Config Exposurehttps://agentprime.io/advisories/CVE-2026-63618/https://agentprime.io/advisories/CVE-2026-63618/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 12:11:35 GMTCVECVE-2026-62393: Apache Kylin: Improper authorization in job information retrievalhttps://agentprime.io/advisories/CVE-2026-62393/https://agentprime.io/advisories/CVE-2026-62393/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 12:19:27 GMTCVECVE-2026-62392: Apache Kylin: OS Command Injection via Async Query APIhttps://agentprime.io/advisories/CVE-2026-62392/https://agentprime.io/advisories/CVE-2026-62392/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 12:18:57 GMTCVECVE-2026-62390: Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh APIhttps://agentprime.io/advisories/CVE-2026-62390/https://agentprime.io/advisories/CVE-2026-62390/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 12:09:40 GMTCVEcritical