LDAP Filter Injection Vulnerability in Apache Zeppelin by The Apache Software Foundation

CVE-2026-44617

What is CVE-2026-44617?

The LDAP filter injection vulnerability in Apache Zeppelin arises from the LdapRealm improperly escaping special characters in LDAP search filters. Instead of utilizing RFC 4515 for filter escaping, the application incorrectly applies RFC 4514 distinguished-name escaping, potentially allowing malicious users to manipulate search queries. This issue, which stems from an incomplete fix of a previous vulnerability, affects specific versions of Apache Zeppelin (0.11.1, 0.11.2, and 0.12.0). Users are strongly advised to upgrade to version 0.12.1 to address this security concern.

References