Apache Impala vulnerabilities

• apache impala Apache Impala: Path traversal executes JARs outside trusted paths CVE-2026-90466 6.5 MediumOctober 7, 2026
• apache impala Apache Impala: RCE via External Data Source Class Loading CVE-2026-65181 8.1 HighSeptember 9, 2026
• apache impala Apache Impala: Secrets Exfiltration via SSRF CVE-2026-57866 8.8 HighSeptember 9, 2026
• apache impala Apache Impala: SAML authentication bypass via forged bearer token CVE-2026-56207 9.8 CriticalSeptember 9, 2026
• apache impala Apache Impala: Avro Schema URL Server-Side Request Forgery CVE-2026-54048 5.3 MediumSeptember 9, 2026
• apache impala Impala logs contain secrets CVE-2021-28131 7.5 HighJuly 22, 2021
• apache impala In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala... CVE-2019-10084 7.5 HighNovember 5, 2019
• apache impala In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may... CVE-2018-11792 9.8 CriticalOctober 24, 2018
• apache impala Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but... CVE-2018-11785 6.5 MediumOctober 24, 2018
• apache impala In Apache Impala (incubating) before 2.10.0, a malicious user with "ALTER" permissions on an... CVE-2017-9792 6.5 MediumOctober 3, 2017
• apache impala During a routine security analysis, it was found that one of the ports in Apache Impala ... CVE-2017-5652 7.5 HighJuly 10, 2017
• apache impala It was noticed that a malicious process impersonating an Impala daemon in Apache Impala ... CVE-2017-5640 9.8 CriticalJuly 10, 2017