LDAP Filter Injection Vulnerability in Apache Zeppelin by The Apache Software Foundation
CVE-2026-44617

6.5MEDIUM

Key Information:

Vendor: Apache
Status: Apache Zeppelin
Vendor: CVE Published:; 30 July 2026

What is CVE-2026-44617?

The LDAP filter injection vulnerability in Apache Zeppelin arises from the LdapRealm improperly escaping special characters in LDAP search filters. Instead of utilizing RFC 4515 for filter escaping, the application incorrectly applies RFC 4514 distinguished-name escaping, potentially allowing malicious users to manipulate search queries. This issue, which stems from an incomplete fix of a previous vulnerability, affects specific versions of Apache Zeppelin (0.11.1, 0.11.2, and 0.12.0). Users are strongly advised to upgrade to version 0.12.1 to address this security concern.