CVE-2026-108837
CVE-2026-108837 · Apache Kylin: Potential computed-column resource exhaustion
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacker has got project admin permission, an cache API maybe used to cause computed-column resource exhaustion. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
EPSS 0.2%
- Published
- Updated
Affected products and versions
apache kylin
- Versions
- ≥ 4.0.0, ≤ 5.0.4: Affected (semver)
No fix published