What is GHSA-9rx7-cp4p-rwx4?

GHSA-9rx7-cp4p-rwx4 is a security advisory published by GitHub Security Advisories with Medium severity. Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin....

Which CVE IDs does GHSA-9rx7-cp4p-rwx4 cover?

GHSA-9rx7-cp4p-rwx4 covers the following CVE IDs: CVE-2026-62393. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9rx7-cp4p-rwx4?

GHSA-9rx7-cp4p-rwx4 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-9rx7-cp4p-rwx4MediumCVSS 4.3

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin....

Vendor

GitHub Security Advisories

Published

July 14, 2026

Last Modified

July 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-62393 →

📋 Description

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects.

This issue affects Apache Kylin: from 4 through 5.0.3.

Users are recommended to upgrade to version 5.0.4, which fixes the issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-62393
https://lists.apache.org/thread/xg8dcyjw0nkq5y8dhq3r25x3rxc62x9j
http://www.openwall.com/lists/oss-security/2026/07/14/6
https://github.com/advisories/GHSA-9rx7-cp4p-rwx4