{"uuid": "f9b9f031-e0b1-445d-9f7e-8db38bb47337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69077", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117452280375946941", "content": "CVE-2026-69077 Apache Kylin: JobController allows unauthorized cross-project manipulation Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.\nThis issue affects Apache Kylin: from 4 through 5.0.4.\nUsers are recommended to upgrade to version 5.0.5, which fixes the issue.\nhttps://www.cve.org/CVERecord?id=CVE-2026-69077https://lists.apache.org/thread.html/wcc7w3lbhfcgb51p867shv1d513z7x1t#apache #ApacheSoftwareFoundation #ApacheKylin#CVE_2026_69077#bot", "creation_timestamp": "2026-10-16T19:39:31.736334Z"}