CVE-2026-44617

MediumCVSS 6.5/10Last modified Oct 23, 2026

Description

LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. This is an incomplete fix of CVE-2024-31867. This issue affects Apache Zeppelin versions 0.11.1, 0.11.2, and 0.12.0. Users are recommended to upgrade to version 0.12.1, which fixes this issue.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-90

Affected software

Vendor	Product	Versions
Apache Software Foundation	Apache Zeppelin	>= 0.11.1, < 0.12.1

References

https://github.com/apache/zeppelin/pull/5226Issue Tracking, Patch
https://lists.apache.org/thread/s65t6n3s1v4j5b1w7zvv5w73ko69m1zvMailing List, Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2024-31867Mailing List, Third Party Advisory

Timeline

Published: Jul 30, 2026
Last modified: Oct 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-446185.3Insecure XML parser configuration in Apache CXF's WS-Transfer module may allow attackers to perform XXE attacks. Users are recommended to up CVE-2026-44628.8Out of bounds read in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a CVE-2026-446215.9With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-reply-threshold', co CVE-2026-446226.5Charging station authentication identifiers are publicly accessible via web-based mapping platforms.CVE-2026-446245.7Incorrect comparison in the Ext2 parser for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow a denial of service. System CVE-2026-446256.8Use after free for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary CVE-2026-446275.8Integer overflow to buffer overflow for some Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before version v2026.0.0 within R CVE-2026-446287.5An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid Called AE Title / storage CVE-2026-446297.9Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances (SV-100E CVE-2026-44638.8Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via CVE-2026-446307.5Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of servic CVE-2026-446319.8Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP S