A vulnerability in Apache Kylin versions 4.0.0 through 5.0.4 allows exposure of sensitive information to unauthorized actors during job manipulation. The impact is considered minor unless job services are exposed to a public network, which is uncommon. The issue is fixed in version 5.0.5.