CVE-2026-68572

Received Received - Intake

Exposure of Sensitive Information in Apache Kylin

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: Apache Software Foundation

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-16

Last Modified

2026-10-16

Generated

2026-10-17

AI Q&A

2026-10-17

EPSS Evaluated

N/A

NVD

CVE-2026-68572

EUVD

EUVD-2026-103147

Affected Vendors & Products

Vendor	Product	Version / Range
Apache	Software	Foundation Apache Kylin 4..0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Apache Kylin where sensitive information is exposed to unauthorized users. It affects versions 4 through 5.0.4. The issue is fixed in version 5.0.5.

Impact Analysis

An attacker could access sensitive data due to improper access controls. This may lead to data breaches, unauthorized access to confidential information, or further exploitation of the system.

Compliance Impact

This vulnerability could violate compliance requirements such as GDPR or HIPAA by exposing personal or health data to unauthorized parties. Organizations may face legal penalties, fines, or reputational damage.

Mitigation Strategies

Upgrade Apache Kylin to version 5.0.5 or later to address the exposure of sensitive information vulnerability.

Hi! I’m here to help you understand CVE-2026-68572. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70