CVE-2026-73334 | Apache Parquet up to 1.18 KmsClient kms_url input validation (EUVD-2026-74804)

September 9, 2026 Yanac

A vulnerability labeled as critical has been found in Apache Parquet up to 1.18. This affects an unknown part of the component KmsClient. Executing a manipulation of the argument kms_url can lead to improper input validation.

This vulnerability is handled as CVE-2026-73334. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More