apache_pinot vulnerabilities

CVEs whose affected-version data names the apache_pinot package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73322None

1w ago

Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled, the single-stage query engine authorizes only the table named in the query's FROM clause. The lookup() transf…

▾ SunlitApache Software Foundation · Apache PinotEPSS 0.18%via CVEORG