PT-2026-117295 · Apache · Apache Kylin

·

CVE-2026-108837

·

Published

2026-10-19

·

Updated

2026-10-19

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacker has got project admin permission, an cache API maybe used to cause computed-column resource exhaustion.
This issue affects Apache Kylin: from 4.0.0 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.

Allocation of Resources Without Limits

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-108837

Affected Products

Apache Kylin