CVE-2026-44617— Apache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867
Quick assessment
Affected
Apache Software Foundation Apache Zeppelin
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Apache zeppelin是美国Apache基金会开源的一个数据分析与协作平台。 Apache Zeppelin 0.11.1版本、0.11.2版本和0.12.0版本存在输入验证错误漏洞，该漏洞可导致特殊过滤器字符转义不足，容易受到LDAP过滤器注入攻击。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apache Software Foundation | Apache Zeppelin | 0.11.1< 0.12.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-44617
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867
Source: CVE Program / CVE List V5
Vulnerability Description
LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. This is an incomplete fix of CVE-2024-31867. This issue affects Apache Zeppelin versions 0.11.1, 0.11.2, and 0.12.0. Users are recommended to upgrade to version 0.12.1, which fixes this issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
LDAP查询中使用的特殊元素转义处理不恰当(LDAP注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Apache Zeppelin 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache zeppelin是美国Apache基金会开源的一个数据分析与协作平台。 Apache Zeppelin 0.11.1版本、0.11.2版本和0.12.0版本存在输入验证错误漏洞，该漏洞可导致特殊过滤器字符转义不足，容易受到LDAP过滤器注入攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Zeppelin | 0.11.1 ~ 0.12.1 | - |
|
II. Public POCs for CVE-2026-44617
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44617
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-44617 (1)
Mailing List Discussions for CVE-2026-44617 (1)
Other References for CVE-2026-44617 (1)
Same Patch Batch · Apache Software Foundation · 2026-07-30 · 13 CVEs total
| CVE-2026-66756 | 6.9 MEDIUM | Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=fal |
| CVE-2026-66755 | 5.9 MEDIUM | Apache Tika: Arbitrary Local File Read in ISArchiveParser |
| CVE-2026-23981 | 5.3 MEDIUM | Apache Superset: Improper Authorization in Chart Update allowing Dashboard Modification |
| CVE-2026-23985 | 5.3 MEDIUM | Apache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser |
| CVE-2026-44613 | Apache Zeppelin: Cross-site request forgery in REST and WebSocket request handling | |
| CVE-2026-44616 | Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction | |
| CVE-2026-28811 | Apache JSPWiki: Error Handling - Reveals Error Details | |
| CVE-2026-28812 | Apache JSPWiki: UserManager does not sanity-check user database at startup | |
| CVE-2026-28813 | Apache JSPWiki: JSPWiki vulnerable to JSON hijacking | |
| CVE-2026-28814 | Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering | |
| CVE-2026-48910 | Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing | |
| CVE-2026-52680 | Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write |
IV. Related Vulnerabilities
Same product: Apache Zeppelin
-
CVE-2026-44615
Path traversal in NotebookRepo note and folder path composit -
CVE-2026-44616
Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm -
CVE-2026-44613
Apache Zeppelin: Cross-site request forgery in REST and WebS -
CVE-2024-51775
Apache Zeppelin: Command Injection via CSWSH -
CVE-2024-41177
Apache Zeppelin: XSS in the Helium module
Same vendor: Apache Software Foundation
-
CVE-2026-102795
Apache Traffic Server: SNI to Host header matching policy is -
CVE-2026-59265
Apache OpenOffice, Apache OpenOffice: Opening a malicious do -
CVE-2026-66054
Apache Thrift: C++ THeaderTransport does not enforce configu -
CVE-2026-61374
Apache Thrift: Java TSaslTransport post-auth data-frame miss -
CVE-2026-63772
Apache Thrift: Unauthenticated single-packet crash of Go Thr
Same weakness: CWE-90
-
CVE-2026-94053
Apache MINA SSHD: LDAP injection in sshd-ldap -
CVE-2026-101145
Eleveo Call Recording Software User Management userAddAction -
CVE-2026-90979
Apache Karaf: LDAP filter injection in JAAS LDAP login modul -
CVE-2026-49469
GLPI: LDAP filter injection in user import feature -
CVE-2026-67223
RabbitMQ: LDAP DN injection via unescaped substitution
V. Comments for CVE-2026-44617
No comments yet