CVE-2026-40563

Apache Atlas is vulnerable to a Code Injection flaw (Improper Control of Generation of Code) due to a DSL search endpoint that accepts user-supplied query strings. An attacker can manipulate Gremlin traversal logic using grammar-allowed characters to gain access to unintended data. This issue aff...