VulnerabilityAnalyzed

CVE-2026-34214

Trino is a distributed SQL query engine for big data analytics.

MEDIUM 6.5EPSS 0.20%

Does this matter?

Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.

Description

Trino is a distributed SQL query engine for big data analytics. From version 439 to before version 480, Iceberg connector REST catalog static credentials (access key) or vended credentials (temporary access key) are accessible to users that have write privilege on SQL level. This issue has been patched in version 480.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.20% probability · 9th percentile
CISA KEV: Not listed
Weakness: CWE-212, CWE-312
Affected: trino/trino
Source: security-advisories@github.com

References

https://github.com/trinodb/trino/releases/tag/480Release Notes
https://github.com/trinodb/trino/security/advisories/GHSA-x27p-5f68-m644Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.