CVE-2026-44617

LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. This is an incomplete fix of CVE-2024-31867. This issue affects Apache Zeppelin versions 0.11.1, 0.11.2, and 0.12.0. Users are recommended to upgrade to version 0.12.1, which fixes this issue.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/apache/zeppelin/pull/5226	Issue Tracking Patch
https://lists.apache.org/thread/s65t6n3s1v4j5b1w7zvv5w73ko69m1zv	Mailing List Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2024-31867	Mailing List Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*

History

23 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de inyección de filtro LDAP en Apache Zeppelin. LdapRealm utilizó el escape de nombre distinguido RFC 4514 al construir filtros de búsqueda LDAP en lugar del escape de filtro RFC 4515, dejando los caracteres especiales del filtro insuficientemente escapados. Esta es una solución incompleta de CVE-2024-31867. Este problema afecta a las versiones de Apache Zeppelin 0.11.1, 0.11.2 y 0.12.0. Se recomienda a los usuarios actualizar a la versión 0.12.1, que soluciona este problema.

Information

Published : 2026-07-30 16:17

Updated : 2026-10-23 22:10

NVD link : CVE-2026-44617

Mitre link : CVE-2026-44617

CVE.ORG link : CVE-2026-44617

JSON object : View

Products Affected

apache

zeppelin

CWE

CWE-90

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

{"id": "CVE-2026-44617", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-44617", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-31T17:52:58.175055Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@apache.org", "affectedData": [{"vendor": "Apache Software Foundation", "product": "Apache Zeppelin", "versions": [{"status": "affected", "version": "0.11.1", "lessThan": "0.12.1", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-30T16:17:12.373", "references": [{"url": "https://github.com/apache/zeppelin/pull/5226", "tags": ["Issue Tracking", "Patch"], "source": "security@apache.org"}, {"url": "https://lists.apache.org/thread/s65t6n3s1v4j5b1w7zvv5w73ko69m1zv", "tags": ["Mailing List", "Vendor Advisory"], "source": "security@apache.org"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2024-31867", "tags": ["Mailing List", "Third Party Advisory"], "source": "security@apache.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@apache.org", "description": [{"lang": "en", "value": "CWE-90"}]}], "descriptions": [{"lang": "en", "value": "LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0This is an incomplete fix of CVE-2024-31867. This issue affects Apache Zeppelin versions 0.11.1, 0.11.2, and 0.12.0. Users are recommended to upgrade to version 0.12.1, which fixes this issue."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n de filtro LDAP en Apache Zeppelin. LdapRealm utiliz\u00f3 el escape de nombre distinguido RFC 4514 al construir filtros de b\u00fasqueda LDAP en lugar del escape de filtro RFC 4515, dejando los caracteres especiales del filtro insuficientemente escapados. Esta es una soluci\u00f3n incompleta de CVE-2024-31867. Este problema afecta a las versiones de Apache Zeppelin 0.11.1, 0.11.2 y 0.12.0. Se recomienda a los usuarios actualizar a la versi\u00f3n 0.12.1, que soluciona este problema."}], "lastModified": "2026-10-23T22:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:zeppelin:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15A2B146-0EAF-4BCF-A253-1F48E9E62ECD", "versionEndExcluding": "0.12.1", "versionStartIncluding": "0.11.1"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}