CVE-2026-44617

Summary: CVE-2026-44617 describes an LDAP filter injection in Apache Zeppelin’s LdapRealm caused by escaping using RFC 4514 (DN escaping) instead of RFC 4515 (filter escaping), leading to insufficiently escaped special filter characters. This is an incomplete fix of CVE-2024-31867. Affected versi...