VDB
CVE-2026-34214
CVE-2026-34214
PUBLISHED
CVSS 7.699999809265137 HIGH
Trino is a distributed SQL query engine for big data analytics. From version 439 to before version 480, Iceberg connector REST catalog static credentials (access key) or vended credentials (temporary access key) are accessible to users that have write privilege on SQL level. This issue has been patched in version 480.
EPSS 0.02% · 4.7th percentile
Risk Scores
CVSS v3.1
7.699999809265137
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS Score
0.02%
4.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| trinodb | trino | >= 439, < 480 |
| trino | trino | 439 |
| Maven | io.trino:trino-iceberg | 439 |
Timeline
- Mar 29, 2026 CVE Published
- Mar 31, 2026 CVE Updated
- Mar 31, 2026 Security Advisory
- Mar 31, 2026 PoC Published
- Mar 31, 2026 PoC Published
- Apr 6, 2026 PoC Published
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score