Server side request forgery exists in Apache Impala 4.4.x and 4.5.x. Authenticated users who have permission to execute the ai_generate_text() function can supply arbitrary URLs; Impala will perform outbound requests to those URLs and can retrieve data provided by the credential providers configured in the hadoop.security.credential.provider.path property of core‑site.xml. The secret’s key must be known to the user in order to exfiltrate the credential value. The result is that sensitive credentials stored in Hadoop credential providers can be exfiltrated through the Impala server, compromising confidentiality.

The vulnerability affects Apache Impala database engine versions 4.4.x and 4.5.x. An attacker must authenticate to Impala and possess the privilege to run ai_generate_text() in order to exploit the flaw. The configuration setting hadoop.security.credential.provider.path in core‑site.xml must specify credential providers for the exfiltration to succeed.

No CVSS score or EPSS estimate is publicly available, and the flaw is not listed in the CISA KEV catalog, indicating that no public exploits are known at this time. However, the required authentication and function privilege limits the attack to users inside the Impala environment, while the impact is a potential loss of confidential credentials if the attacker knows the credential key. The lack of public exploit evidence reduces urgency, but the high confidentiality impact warrants prompt remediation.