Description
Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record does not start with "CN=".




This only affects install that have the non default LDAP group provider configured. 


Users are recommended to upgrade to version 1.10.0, which fixes this issue.
Published: 2026-10-07
Score: 2.1 Low
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Upgrade
AI Analysis

Impact

An out‑of‑bounds read occurs when the LDAP group resolver processes a memberOf attribute that does not begin with "CN=", causing the YuniKorn scheduler to panic and crash. This memory corruption weakness (CWE‑248) results in a denial of service for the affected cluster without providing arbitrary code execution.

Affected Systems

Apache YuniKorn from the Apache Software Foundation, versions 1.8.x prior to 1.10.0, when the non‑default LDAP group provider is configured. The problem appears during processing of group membership entries returned by an LDAP server.

Risk and Exploitability

The CVSS score of 2.1 indicates a low severity, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. Attackers can trigger the crash by influencing the LDAP server to return an improperly formatted memberOf attribute; the likely attack vector is through LDAP server responses. Because the crash merely terminates the scheduler, the risk is limited to a denial of service that could disrupt cluster operation.

Generated by OpenCVE AI on October 7, 2026 at 10:36 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor‑supplied patch by upgrading to version 1.10.0 or later, which fixes the out‑of‑bounds read.
  • If an immediate upgrade is not possible, temporarily disable the LDAP group resolver or reconfigure the cluster to use the default group provider until the patch is applied.
  • After changes, monitor the scheduler logs for crash indicators and ensure that no unhandled group membership entries are processed.

Generated by OpenCVE AI on October 7, 2026 at 10:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 09 Oct 2026 09:15:00 +0000

Type Values Removed Values Added
First Time appeared Apache
Apache yunikorn
Vendors & Products Apache
Apache yunikorn

Wed, 07 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 07 Oct 2026 11:30:00 +0000

Type Values Removed Values Added
References

Wed, 07 Oct 2026 09:30:00 +0000

Type Values Removed Values Added
Description Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record does not start with "CN=". This only affects install that have the non default LDAP group provider configured.  Users are recommended to upgrade to version 1.10.0, which fixes this issue.
Title Apache YuniKorn: LDAP Group provider panics on lowercase attribute name
Weaknesses CWE-248
References
Metrics cvssV4_0

{'score': 2.1, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/S:N/AU:N/R:A/V:D/RE:H/U:Green'}

Subscriptions

Apache Yunikorn
cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published:

Updated: 2026-10-07T17:50:51.368Z

Reserved: 2026-08-24T05:15:32.611Z

Link: CVE-2026-78243

cve-icon Vulnrichment

Updated: 2026-10-07T10:13:34.935Z

cve-icon NVD

Status : Deferred

Published: 2026-10-07T10:17:36.017

Modified: 2026-10-07T18:17:30.637

Link: CVE-2026-78243

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-09T08:16:30Z

Weaknesses