CVE-2026-68571
Awaiting Analysis Awaiting Analysis - Queue

Code Injection in Apache Kylin

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: Apache Software Foundation

Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection.  Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-68571
EUVD
EUVD-2026-102855

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Apache Software Foundation Apache Kylin 4.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a code injection vulnerability in Apache Kylin where a special parameter in the JDBC URL can be manipulated to execute arbitrary code. It affects versions 4.0 through 5.0.4.

Detection Guidance

Detecting this vulnerability requires checking Apache Kylin versions. Run: kylin version or check the version in the deployment directory. If the version is between 4.0 and 5.0.4, the system is vulnerable.

Impact Analysis

The impact is most severe for Kylin services directly exposed to the public internet. In-house deployments are typically not affected. Successful exploitation could allow attackers to run malicious code on the system.

Compliance Impact

The vulnerability could potentially lead to unauthorized code execution, which may result in data breaches or unauthorized access to sensitive information. This could impact compliance with GDPR (data protection) and HIPAA (healthcare data privacy) if such data is exposed or mishandled due to the vulnerability.

Mitigation Strategies

Upgrade Apache Kylin to version 5.0.5 or later immediately. If upgrading is not possible, restrict network exposure of Kylin services to trusted networks only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68571. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart