58 matches found
cve-2026-41042
CVE-2026-41042: Apache Gravitino 1.2.1 Unauthenticated RCE Self-contained, stdlib-only proof of concept for CVE-2026-41042: unauthenticated remote code execution in Apache Gravitino before 1.2.1 via the H2 JDBC INIT connection setting. No auth headers, no extra drivers, no pip installs. python3...
Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution
Apache Gravitino 1.2.1 contains a remote code execution caused by unsanitized H2 JDBC URL via testConnection API using H2's INIT parameter, letting unauthenticated attackers execute arbitrary Java code remotely, exploit requires H2 usage. id: CVE-2026-41042 info: name: Apache Gravitino 1.2.1 -...
apache-gravitino (>=1.2.0.dev0, <=1.3.1), arthexis (>=0.2.2, <=0.2.3) +43 more potentially affected by CVE-2026-114134 via black (>=26.1.0a1, <=26.10.0)
black PYPI version =26.1.0a1, =1.2.0.dev0, =0.2.2, =3.1.0, =3.9.11, =0.1.52, =1.0.0, =0.7.4, =2.189.0, =1.9.27, =2602.1.0, =0.12.0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-114134 Source advisory: OSV:GHSA-CG8M-R9F2-5WM2...
URL Path Injection
Apache Gravitino is vulnerable to URL Path Injection. The vulnerability is due to unencoded user-supplied identifiers being used in URL paths, allowing an attacker to inject path components into requests...
Server-Side Request Forgery
Apache Gravitino is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of job template URIs in JobManager, allowing authenticated attackers to force the server to send HTTP requests to arbitrary internal network services or cloud metadata endpoints...
Apache Gravitino 1.2.1 Server-Side Request Forgery
A server-side request forgery vulnerability exists in Apache Gravitino versions 1.0.0 through 1.2.1 via the fetchFileFromUri method in JobManager.java. Exploit Title: Apache Gravitino 1.2.1 - SSRF Google Dork: N/A Date: 2026-07-13 Exploit Author: Ajay Rajpurohit Vendor Homepage:...
Apache Gravitino 1.2.1 - SSRF
Exploit Title: Apache Gravitino 1.2.1 - SSRF Google Dork: N/A Date: 2026-07-13 Exploit Author: Ajay Rajpurohit Vendor Homepage: https://gravitino.apache.org/ Software Link: https://github.com/apache/gravitino Version: 1.0.0 - 1.2.1 Tested on: Ubuntu 22.04 LTS CVE: CVE-2026-49876 Description: A...
Apache Gravitino - Detect
Detects a Apache Gravitino web application, world's most powerful open data catalog for building a high-performance, geo-distributed and federated metadata lake. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Apache Gravitino web application, world's most powerful open data catalog for...
Remote Code Execution (RCE)
Apache Gravitino is vulnerable to Remote Code Execution RCE . The vulnerability is due to insufficient validation of H2 JDBC URLs in the testConnection API, where attacker-controlled URLs can abuse the H2 INIT parameter to execute arbitrary Java code on the server...
Improper Handling of URL Encoding (Hex Encoding)
Overview Affected versions of this package are vulnerable to Improper Handling of URL Encoding Hex Encoding in the MCP REST client due to improper encoding of user-supplied identifiers during f-string URL construction. An attacker can access unintended API endpoints by injecting crafted path...
PYSEC-2026-3442
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via unvalidated job template URI processing. An attacker can access internal network resources and cloud metadata endpoints by submitting crafted URIs through authenticated requests. Remediation Upgrade...
org.apache.gravitino:gravitino-authorization-chain (>=1.0.0, <=1.2.1), org.apache.gravitino:gravitino-authorization-common (>=1.0.0, <=1.2.1) +24 more potentially affected by CVE-2026-49876 via org.apache.gravitino:gravitino-core (>=1.0.0, <=1.2.1)
org.apache.gravitino:gravitino-core MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.2.1 and more Source cves: CVE-2026-49876 Source advisory:...
PYSEC-2026-3442
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.This issue affects Apache Gravitino: from 1.0.0 through 1.2.1.Users are recommended to upgrade to...
CVE-2026-49876
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to...
PYSEC-2026-3441
URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...
PYSEC-2026-3441
URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino.This issue affects Apache Gravitino: from 1.0.0 before 1.2.1.Users are recommended to upgrade to version 1.2.1, which fixes the issue...
CVE-2026-41041
URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...
CVE-2026-41041 Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.
URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...
CVE-2026-41041
URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...