Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Unity Catalog is an open, multi-modal Catalog for data and AI. In 0.4.0 and earlier, a critical authentication bypass vulnerability exists in the Unity Catalog token exchange endpoint (/api/1.0/unity-control/auth/tokens). The endpoint extracts the issuer (iss) claim from incoming JWTs and uses it to dynamically fetch the JWKS endpoint for signature validation without validating that the issuer is a trusted identity provider.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-11 | 3 | Disclosure3 |
| 2026-05-11 | 1 | Patch1 |
| 2026-05-13 | 1 | Disclosure1 |
Two auth-bypass bugs disclosed in the last 48 hours. Look totally different. Same bug. SillyTavern (CVE-2026-44649) and Databricks' Unity Catalog (CVE-2026-27478) both shipped a server that believed what the client said about who it was.
Post summary
Both CVEs are newly disclosed auth-bypass bugs; the tweet announces their discovery without detailing exploitation, patches, or PoC references.
🚨Critical - Unity Catalog JWT Issuer Validation Bypass (CVE-2026-27478) A critical authentication bypass exists in the Unity Catalog server's token exchange endpoint. The system extracts the issuer (iss) claim from incoming JWTs and fetches the JWKS endpoint for signature validation without verifying if the issuer is trusted. This allows an attacker to host a malicious OIDC server and impersonate any user, gaining full access to all catalogs and resources. 👉 Affected: Unity Catalog <= 0.4.0 | Upgrade to 0.4.1
Post summary
A critical authentication bypass in Unity Catalog’s token exchange endpoint is disclosed; upgrading to version 0.4.1 resolves the issue.
🚨 CVE-2026-27478: Unity Catalog has a JWT Issuer V... Attacker-controlled JWT issuer claims let you forge any user identity by pointing validation to your own JWKS endpoint ... https://zerodaysignal.com/vulnerability/CVE-2026-27478 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
A newly disclosed vulnerability in Unity Catalog enables attackers to forge JWT issuers and impersonate any user by pointing validation to a custom JWKS endpoint.
CVE-2026-27478 Unity Catalog is an open, multi-modal Catalog for data and AI. In 0.4.0 and earlier, a critical authentication bypass vulnerability exists in the Unity Catalog token … https://www.cve.org/CVERecord?id=CVE-2026-27478
Post summary
The entry announces a critical authentication bypass in Unity Catalog versions 0.4.0 and earlier, providing basic technical details but no PoC, exploit code, or patch information.
[CVE-2026-27478: CRITICAL] Critical authentication bypass vulnerability identified in Unity Catalog versions 0.4.0 and earlier. This flaw in the token exchange endpoint could allow unauthorized access. #Cybe...#cve,CVE-2026-27478,#cybersecurity https://cvefind.com/CVE-2026-27478
Post summary
The tweet reports a critical authentication bypass vulnerability (CVE-2026-27478) for Unity Catalog 0.4.0 and earlier, indicating that the token exchange endpoint can be exploited for unauthorized access; no PoC, exploit, or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | unitycatalog | unitycatalog | - | - | - |