Unitycatalog vulnerabilities
We track 1 vulnerability in Unitycatalog products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Unitycatalog vulnerabilities
- 9.1 Critical severity
unitycatalog: Authentication Bypass by Spoofing
Unity Catalog is an open, multi-modal Catalog for data and AI. In 0.4.0 and earlier, a critical authentication bypass vulnerability exists in the Unity Catalog token exchange endpoint (/api/1.0/unity-control/auth/tokens). The endpoint extracts the issuer (iss)