CVE-2026-97720

Summary

The flaw lies in the incorrect implementation of JWT/OAuth authentication in Apache Impala executors, allowing attackers to access resources served by the executor's webserver by bypassing token validation.

Exploitability

Exploitation is relatively easy as long as the webserver is configured to accept JWT/OAuth tokens, with no specific technical preconditions other than the presence of valid JWTs.

Blast radius

If exploited, the impact could be significant, as attackers could gain unauthorized access to sensitive resources served by the Impala executors webserver.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Apache Impala version 4.5.3 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.