CVE-2026-44616: apache software foundation apache zeppelin LDAP Injection

Vulnerability summary

CVE-2026-44616 is a medium (CVSS 6.5) LDAP Injection vulnerability in apache software foundation apache zeppelin. EPSS estimates a 0.76% chance of exploitation in the next 30 days, higher than 54.3% of scored vulnerabilities.

Timeline

1. 30-07-2026
   PublishedVulnerability first disclosed.
2. 31-07-2026
   Last modifiedVulnerability information updated.

Description

LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint                   and potentially expose directory information. The role-lookup path was also affected after successful LDAP authentication. This issue affects Apache Zeppelin versions 0.6.0 through 0.12.0. Users are recommended to upgrade to version 0.12.1, which                   fixes this issue.

• CWE-90Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downstream component.