Unsafe Reflection Vulnerability in Apache Calcite by Apache

CVE-2026-46718

What is CVE-2026-46718?

A vulnerability exists in Apache Calcite that allows the use of externally-controlled input to select classes or code, leading to potential security risks. Specifically, this issue impacts versions from 1.5.0 prior to 1.42, which could be exploited to execute unintended commands or access sensitive data. It is crucial for users to upgrade to version 1.42 or higher to mitigate these risks and secure their applications.

References