CVE-2026-84439

Apache ZooKeeper is affected by an audit log injection vulnerability in zookeeper_audit.log. When audit logging is enabled (zookeeper.audit.enable=true), two attack vectors exist: an unauthenticated attacker can embed tab characters (\t) in a digest authentication username, and an authenticated c...