Read the docs
TI-2026-76739 Aliases CVE-2026-92287GHSA-3xf4-85xv-wmpw

Unvalidated KMS URL forwarded to KmsClient in Apache Arrow Parquet

Priority LOW 37CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Partial Red Hat: 10 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

Apache Arrow C++ from 4.0.0 before 26.0.0 and PyArrow from 8.0.0 before 26.0.0 pass a KMS URL taken from a Parquet file to a pluggable KmsClient without validating it (CWE-20). If a user reads a crafted file and the KmsClient does not validate hosts, an attacker-chosen host can receive a KMS token. The attacker needs no privileges, but a user must read the file.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled (specified in the KmsConnectionConfig) or file-controlled. If the user does not leverage application control for this parameter, a file-controlled KMS URL is forwarded to a pluggable KmsClient implementation. If the KMS implementation does not perform host validation and makes use of the provided KMS URL, a KMS token can be sent to a malicious host set by an attacker in the file.  Users are recommended to upgrade to version 26.0.0, which disables this behavior by default and requires that users opt-in to it by enabling the read_kms_url flag in the DecryptionConfiguration. Users of affected versions are recommended to either specify the KMS URL in the KmsConnectionConfig when reading files, or ensure any KmsClient implementations validate received KMS URLs. Users that opt-in to file-controlled KMS URLs in version 26.0.0 and later must ensure KmsClients validate KMS URLs.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00352 29th percentileScored 2026-11-07
Fix Partial Apache Arrow C++ (Apache Software Foundation): 26.0.0PyArrow (Apache Software Foundation): 26.0.0Red Hat: 10 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ApacheApache Arrow C++4.0.0 to before 26.0.026.0.0Patch availableCNA
ApachePyArrow8.0.0 to before 26.0.026.0.0Patch availableCNA
  • Apache Arrow C++ VendorApache Affected 4.0.0 to before 26.0.0 Fixed in 26.0.0 Patch available CNA
  • PyArrow VendorApache Affected 8.0.0 to before 26.0.0 Fixed in 26.0.0 Patch available CNA

Remediation

Upgrade Apache Arrow C++ and PyArrow to 26.0.0, which disables file-controlled KMS URLs by default; enabling read_kms_url in DecryptionConfiguration opts back in. Until then, specify the KMS URL in KmsConnectionConfig or make sure every KmsClient validates received KMS URLs. The sources list no fixed version for Exploit Intelligence, Lightspeed Core, Migration Toolkit for Applications 8, OpenShift Lightspeed, Red Hat AI Inference Server, Red Hat Ceph Storage 7, 8 and 9, Red Hat Enterprise Linux AI (RHEL AI) 3, and Red Hat OpenShift AI (RHOAI).

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

  • Fix · CNA Apache Arrow C++ (Apache Software Foundation) Fixed in 26.0.0
  • Fix · CNA PyArrow (Apache Software Foundation) Fixed in 26.0.0

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Exploit IntelligenceAffectedNo fix planned: Out of support scope
Lightspeed CoreAffectedNo fix yet: Fix deferred
Migration Toolkit for Applications 8AffectedNo fix yet: Fix deferred
OpenShift LightspeedAffectedNo fix yet: Fix deferred
Red Hat AI Inference ServerAffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 7AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 8AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 9AffectedNo fix yet: Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet: Fix deferred
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet: Fix deferred

Timeline

  1. 2026-10-20 Threatist record created from CVE-2026-92287
  2. 2026-10-20 Alias added: GHSA-3xf4-85xv-wmpw
  3. 2026-10-20 Affected versions changed · Red Hat
  4. 2026-10-20 CVSS score added · Red Hat
  5. 2026-10-29 CVSS score added · CISA ADP
  6. 2026-10-29 CISA SSVC decision points changed

References

Advisory 1

Other 1

  • TI-2025-18529 Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT KEVCVSS 3.1CRITICAL 10.0
  • TI-2024-30292 Apache OFBiz: Confused controller-view authorization logic (forced browsing) KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-26062 Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-21190 Apache OFBiz: Path traversal leading to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-18186 Apache HugeGraph-Server: Command execution in gremlin KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-25106 Deserialization of untrusted data in Apache ActiveMQ KEVCVSS 3.1CRITICAL 10.0
See all 4053 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences