CVE-2026-84439: Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources

<p>Posted by Andor Molnar on Sep 15</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache ZooKeeper (org.apache.zookeeper:zookeeper) 3.9.0 through 3.9.5<br /> - Apache ZooKeeper (org.apache.zookeeper:zookeeper) 3.8.0 through 3.8.6<br /> <br /> Description:<br /> <br /> When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject arbitr