CVE-2018-11785: Apache Impala

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong results for a query.

Affected products

• Apache Impala: before 3.0.1 (fixed in 3.0.1)

Published 2018-10-24. Last modified 2026-06-17.