Apache Software Foundation Apache Pinot

• CVE-2026-73322 Unrated Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup() 0.2%
• CVE-2024-56325 Critical 9.8 Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required 80.2%
• CVE-2024-39676 High 7.5 Apache Pinot: Unauthorized endpoint exposed sensitive information 0.8%
• CVE-2022-26112 Critical 9.8 Pinot query endpoint and the realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support 1.6%
• CVE-2022-23974 Unrated Pinot segment push endpoint has a vulnerability in unprotected environments 2.1%