Apache Software Foundation Apache Arrow C++

• CVE-2026-92287 High 8.1 Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation 0.4%