CVE-2026-56207: Apache Impala: SAML authentication bypass via forged bearer token

[Michael Smith <michaelsmith () apache org>]

Severity: critical 

Affected versions:

- Apache Impala 4.0.0 through 4.5.1

Description:

Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, 
allowing altering user name and acting as another user.



This issue affects Apache Impala: >=4.0.0.



Users are recommended to upgrade to version 4.5.2, which fixes this issue.

Credit:

Andrew Rukin (Arenadata) (reporter)

References:

https://impala.apache.org/
https://www.cve.org/CVERecord?id=CVE-2026-56207