CVE-2026-56207

CRITICAL 9.8

Apache Impala: SAML authentication bypass via forged bearer token

CVSS Score

9.8

EPSS Score

0.0%

EPSS Percentile

0th

Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user. This issue affects Apache Impala: >=4.0.0. Users are recommended to upgrade to version 4.5.2, which fixes this issue.

CWE	CWE-347
Vendor	apache software foundation
Product	apache impala
Published	Sep 9, 2026
Last Updated	Sep 10, 2026

Stay Ahead of the Next One

Get instant alerts for apache software foundation apache impala

Be the first to know when new critical vulnerabilities affecting apache software foundation apache impala are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache Software Foundation / Apache Impala

4.0.0 ≤ 4.5.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

lists.apache.org: https://lists.apache.org/thread/20cov78py0zqzx7dyq39ktythkwn91zs openwall.com: http://www.openwall.com/lists/oss-security/2026/09/08/22

Credits

🔍 Andrew Rukin (Arenadata)