CVE-2026-108833: Apache Kylin: default startup profile miss security settings

Summary by Cyber Security News16 Oct 2026, 06:10 CET

About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/195

Posted by Li Yang on Oct 15 Severity: low Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue affects Apache Kylin: from 4.0.0 through 5.0.4.

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.