Apache Impala vulnerabilities

12 CVEs affecting Apache Impala, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-90466, published 2026-10-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-28131, published 2021-07-22. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Impala sessions use a 16 byte secret to verify that the session is not being hijacked by another user. However, these secrets appear in the Impala logs, therefore Impala users with access to the logs…
CVE-2017-5640, published 2017-07-10. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0 could cause Impala daemons to skip authentication checks when Kerberos is enabled…
CVE-2018-11792, published 2018-10-24. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential security risk, such as having ALTER on a table and ALL on a particular database…
CVE-2017-9792, published 2017-10-04. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. In Apache Impala (incubating) before 2.10.0, a malicious user with "ALTER" permissions on an Impala table can access any other Kudu table data by altering the table properties to make it "external"…
CVE-2018-11785, published 2018-10-24. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong results for a query.
CVE-2017-5652, published 2017-07-10. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent data in plaintext even when the cluster was configured to use TLS. The port in…
CVE-2019-10084, published 2019-11-05. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala queries or sessions can interact with those sessions or queries via a specially-constructed request and…
CVE-2026-57866, published 2026-09-09. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the ai_generate_text() function can exfiltrate secrets provided by the…
CVE-2026-54048, published 2026-09-09. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. Specifying tblproperties('avro.schema.url'=' http://...' ) or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal…
CVE-2026-65181, published 2026-09-09. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are…

Latest

CVE-2026-90466, published 2026-10-07. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trusted_jar_paths'. The…
CVE-2026-56207, published 2026-09-09. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user. This issue affects Apache…