CVE-2026-62393

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-62393

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-62393.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-62393

Published

2026-07-14T12:19:27.705Z

Modified

2026-07-17T03:41:56.974389416Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Apache Kylin: Improper authorization in job information retrieval

Details

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects.

This issue affects Apache Kylin: from 4 through 5.0.3.

Users are recommended to upgrade to version 5.0.4, which fixes the issue.

Database specific

{
    "cwe_ids": [
        "CWE-280"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/62xxx/CVE-2026-62393.json",
    "cna_assigner": "apache",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "4"
                },
                {
                    "last_affected": "5.0.3"
                }
            ],
            "source": "AFFECTED_FIELD"
        },
        {
            "extracted_events": [
                {
                    "introduced": "4"
                },
                {
                    "fixed": "5.0.3"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

References

Affected packages

Git / github.com/apache/kylin

Affected ranges

Type

GIT

Repo

https://github.com/apache/kylin

Events

Introduced

aa6d582c0a96fdf31e85791f86850cfc00a7644f

Fixed

193da6269b622add8738ecacc932b37cb205a8c7

Database specific

{
    "cpe": "cpe:2.3:a:apache:kylin:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "5.0.4"
        }
    ],
    "source": "CPE_RANGE"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-62393.json"