CVE-2026-44616: Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction

<p>Posted by Jongyoul Lee on Jul 30</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Zeppelin 0.6.0 before 0.12.1<br /> <br /> Description:<br /> <br /> LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without <br /> escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax t