CVE-2026-62393CWE-280

Apache Kylin: Improper authorization in job information retrieval

Medium · published July 14, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
38.4
In the wild
Unconfirmed
What it is

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects.

This issue affects Apache Kylin: from 4 through 5.0.3.

Users are recommended to upgrade to version 5.0.4, which fixes the issue.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00454 · 38.4th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2026-07-14T12:19Z
EPSS history
Timeline
  • 14 JUL 12:19Z
    Apache Kylin: Improper authorization in job information retrieval
    cvelistv5