Threats Tagged 'ghsa-9qj3-8pcf-3r59'

CVE-2026-108709 is a critical authentication bypass vulnerability in Apache Kylin affecting versions from 4.0.4 through 5.0.4. The flaw primarily impacts Kylin services exposed directly to public networks, which is uncommon, while typical in-house deployments are mostly unaffected. The issue allows attackers to bypass authentication, potentially leading to full compromise of confidentiality, integrity, and availability. Users are advised to upgrade to version 5.0.5, which addresses this vulnerability.