CVE-2026-46718

Apache Calcite versions 1.5.0 before 1.42 are vulnerable to an Unsafe Reflection issue caused by the use of externally-controlled input to select classes or code. This vulnerability allows for potential unauthorized execution or manipulation within the environment. To remediate this issue, users ...

CVE-2026-46718 Apache Calcite: A user-controled model can load arbitrary classes, leading to code execution

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Calcite. This issue affects Apache Calcite: from 1.5.0 before 1.42. Users are recommended to upgrade to version 1.42, which fixes the issue...

PT-2026-45695

Name of the Vulnerable Software and Affected Versions Apache Calcite versions 1.5.0 through 1.41 Description An unsafe reflection issue exists where externally-controlled input can be used to select classes or code. Specifically, a user-controlled model can load arbitrary classes, which may lead ...