CVE-2026-79993: Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znode

<p>Posted by Andor Molnar on Sep 15</p>Severity: critical <br /> <br /> Affected versions:<br /> <br /> - Apache ZooKeeper (org.apache.zookeeper:zookeeper) 3.9.0 through 3.9.5<br /> - Apache ZooKeeper (org.apache.zookeeper:zookeeper) 3.8.0 through 3.8.6<br /> <br /> Description:<br /> <br /> The `deleteContainer` opcode (0x14/20) is processed without verifying the caller&apos;s ACL permissions, al