{"id":"CVE-2026-90466","revision":"b648d7e499404b1d9a19077441bc71fd","records":[{"revision":"b648d7e499404b1d9a19077441bc71fd","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-90466","aliases":[],"title":"Apache Impala: Path traversal executes JARs outside trusted paths","description":"Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trusted_jar_paths'.\n\n\n\n\nThe startup flag 'trusted_jar_paths' references URIs for loading files from local or remote filesystems. Path traversal can't override the schema, but can result in loading a JAR that has been uploaded to a different location in that filesystem via Impala DDLs such as CREATE DATA SOURCE and CREATE TABLE. Path traversal can only be used if a trusted path exists, so this attack\u00A0requires 'trusted_jar_paths' have a non-empty value configured by the Impala admin.\n\n\n\n\nUsers are recommended to upgrade to version 4.5.3, which fixes this issue.","state":0,"publishedAt":"2026-10-07T08:47:12.542+00:00","modifiedAt":"2026-10-07T18:46:39.669+00:00","affected":[{"ecosystem":"Vendor product","name":"Apache Impala","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Apache Software Foundation\",\n                    \"product\": \"Apache Impala\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.5.2\",\n                            \"lessThan\": \"4.5.3\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://lists.apache.org/thread.html/m7qbho4j1g4v7kx7pbk4z2n8p9nx6bqn"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-90466","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-90466","identifiers":["CVE-2026-90466"]},"retained":false,"historicalAffected":[]}],"coverage":[]}