What’s Vulnerable › Products

Apache Software Foundation Apache Pinot vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Apache Software Foundation Apache Pinot version is affected

Latest Apache Software Foundation Apache Pinot vulnerabilities

• CVE-2026-73322 — Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()
• CVE-2024-56325 — Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required (CVSS 9.8)
• CVE-2024-39676 — Apache Pinot: Unauthorized endpoint exposed sensitive information (CVSS 7.5)
• CVE-2022-26112 — Pinot query endpoint and the realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support (CVSS 9.8)
• CVE-2022-23974 — Pinot segment push endpoint has a vulnerability in unprotected environments (CVSS 7.5)