VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jul 14, 2026· Updated Jul 15, 2026

CVE-2026-62393

CVE-2026-62393

Description

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects.

This issue affects Apache Kylin: from 4 through 5.0.3.

Users are recommended to upgrade to version 5.0.4, which fixes the issue.

Affected products

2
  • Apache/Kylinllm-create2 versions
    4 - 5.0.3+ 1 more
    • (no CPE)range: 4 - 5.0.3
    • cpe:2.3:a:apache:kylin:*:*:*:*:*:*:*:*range: >=4.0.0,<5.0.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.