p PatchFirst

CVE-2026-108833

CVE-2026-108833 · Apache Kylin: default startup profile miss security settings

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.

EPSS 0.2%

Published
Updated

Affected products and versions

  • apache kylin

    Versions
    • ≥ 4.0.0, ≤ 5.0.4: Affected (semver)

    No fix published

Original sources

Check your server →