CVE-2026-62392: Apache Kylin: OS Command Injection via Async Query API

<p>Posted by Li Yang on Jul 13</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Kylin 4 through 5.0.3<br /> <br /> Description:<br /> <br /> Improper Neutralization of Special Elements used in an OS Command (&apos;OS Command Injection&apos;) vulnerability in Apache <br /> Kylin. A backend API may bring job config parameters to OS command line.<br /> <br /> This issue a