Vulnerability in Trinodb Trino
CVE-2026-34214
Trino is a distributed SQL query engine for big data analytics. From version 439 to before version 480, Iceberg connector REST catalog static credentials (access key) or vended credentials (temporary access key) are accessible to users tha…
EPSS: 0.000 (4.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.
Affected products
- Trinodb Trino — versions >= 439, < 480
Weakness classification (CWE)
References
- https://github.com/trinodb/trino/security/advisories/GHSA-x27p-5f68-m644 (x_refsource_CONFIRM)
- https://github.com/trinodb/trino/releases/tag/480 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-34214?
- CVE-2026-34214 is a high-severity vulnerability in Trinodb Trino, classified under Improper Removal of Sensitive Information Before Storage or Transfer. CVSS score: 7.7/10. Published 2026-03-31.
- How severe is CVE-2026-34214?
- High severity. CVSS v3 base score is 7.7 out of 10.