# CVE-2026-44615: Apache Zeppelin path traversal in FileSystemNotebookRepo

Source: https://junglewise.ai/threats/cve-2026-44615-apache-zeppelin-path-traversal-in-filesystemnotebookrepo  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-31. Updated: 2026-07-31  
License: CC BY 4.0 with a link back

CVE-2026-44615 · Severity: info · CVSS 0 · Published 2026-07-31

Apache Zeppelin is a web-based notebook used for data exploration and analysis. A security flaw in how it handles file paths allows an authorized user to bypass directory restrictions. This could allow an attacker to move, modify, or delete sensitive files on the server's filesystem or connected Hadoop storage, potentially leading to data loss or system instability.

Technologies: [Apache Software Foundation Zeppelin](https://junglewise.ai/threats/technologies/zeppelin). Vendors: [Apache Software Foundation](https://junglewise.ai/threats/vendors/apache-software-foundation).

## Quick answers

**Is CVE-2026-44615 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-44615 being exploited in the wild.

**How severe is CVE-2026-44615?** Informational severity, with a CVSS score of 0, published 31 July 2026.

**Which products and versions are affected?** Apache Software Foundation Zeppelin 0.9.0 through 0.12.0.

**Is there a fix for CVE-2026-44615?** A patch was published on 2026-05-14: Fix merged into master and 0.12 branches Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-44615 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-44615?** Check whether you run Apache Software Foundation Zeppelin at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A path traversal vulnerability exists in Apache Zeppelin's FileSystemNotebookRepo component. When processing note renames or folder operations, the application fails to properly sanitize user-supplied path segments, allowing the inclusion of traversal sequences (e.g., '../'). An authenticated attacker with permissions to rename notes or manage folders can exploit this to manipulate files outside the designated notebook directory using the server's filesystem or Hadoop identity. The vulnerability also affects object-store backends like S3, Azure, and GCS that build keys directly from user strings. The issue is resolved in version 0.12.1 by implementing recursive URL-decoding and strict validation of path segments.

## Affected products

- Apache Software Foundation Zeppelin 0.9.0 through 0.12.0

## Timeline

- 2026-05-14: patched: Fix merged into master and 0.12 branches
- 2026-07-31: disclosed: CVE-2026-44615 published

## References

- [https://github.com/apache/zeppelin/pull/5227](https://github.com/apache/zeppelin/pull/5227)
- [https://github.com/apache/zeppelin/pull/5248](https://github.com/apache/zeppelin/pull/5248)
- [https://lists.apache.org/thread/ps1f0symnyxzq8c2dc3244v051jcwp40](https://lists.apache.org/thread/ps1f0symnyxzq8c2dc3244v051jcwp40)

## Related threats

- [Apache Zeppelin LDAP filter injection in LdapRealm](https://junglewise.ai/threats/cve-2026-44617-apache-zeppelin-ldap-filter-injection-in-ldaprealm)
- [Apache Zeppelin LDAP injection in ActiveDirectoryGroupRealm](https://junglewise.ai/threats/cve-2026-44616-apache-zeppelin-ldap-injection-in-activedirectorygrouprealm)
- [Apache Zeppelin CSRF in REST and WebSocket endpoints](https://junglewise.ai/threats/cve-2026-44613-apache-zeppelin-csrf-in-rest-and-websocket-endpoints)