What is the CVSS score of CVE-2026-44613?

CVE-2026-44613 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2026-44613?

Yes, a patch is available for CVE-2026-44613. Update the affected software to the latest version immediately.

Apache Zeppelin CVE-2026-44613

EUVD-2026-51160 MEDIUM

Cross-Site Request Forgery (CSRF) (CWE-352)

2026-07-30

GHSA-3w7g-q5x7-jg2r

Apache CSRF Zeppelin

6.1

CVSS 3.1 · Vendor

Severity by source

Vendor (CNA) PRIMARY

6.1 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

vuln.today AI

6.5 MEDIUM

Attacker needs no privileges (PR:N) but victim must visit malicious page (UI:R); primary impact is integrity via unauthorized actions as the victim, with no direct confidentiality disclosure from the CSRF mechanism itself.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (CNA).

CVSS VectorVendor

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

CVSS changed

Jul 31, 2026 - 18:37 NVD

6.1 (MEDIUM)

Patch available

Jul 30, 2026 - 16:03 EUVD

Analysis Generated

Jul 30, 2026 - 12:20 vuln.today

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

AnalysisAI

Cross-Site Request Forgery in Apache Zeppelin 0.6.0 through 0.12.0 allows an attacker who lures an authenticated user to a malicious webpage to perform unauthorized actions across the full REST API and WebSocket endpoint surface on the victim's behalf. The vulnerability stems from a permissive default CORS configuration combined with server-side acceptance of text/plain request bodies - a combination that bypasses standard browser preflight CSRF defenses without requiring any special exploit code. No public exploit or CISA KEV listing has been identified; the vendor rates this moderate and has released a patch in version 0.12.1.

Technical ContextAI

Apache Zeppelin is an open-source, web-based interactive data analytics notebook supporting Spark, PySpark, SQL, Python, R, and 20+ interpreter backends, commonly deployed in enterprise data engineering and data science pipelines. The vulnerability resides in the default CORS policy of the Zeppelin web server, which failed to restrict cross-origin state-changing requests. The critical compounding factor is that the server accepted request bodies with a text/plain Content-Type - a well-known CSRF bypass technique exploiting the CORS specification: browsers send text/plain cross-origin requests without triggering a preflight OPTIONS check, meaning the browser's built-in CORS preflight protection never fires. The attack surface extends to WebSocket endpoints in addition to REST, as WebSocket upgrade requests can be initiated cross-origin and the server did not validate the Origin header. No CWE identifier was provided in the input data, but the root cause maps to CWE-352 (Cross-Site Request Forgery). The upstream fix is tracked in GitHub pull request #5229.

RemediationAI

Upgrade Apache Zeppelin to version 0.12.1, which resolves the default CORS misconfiguration and CSRF exposure per the vendor release notes at https://zeppelin.apache.org/. The 0.12.1 release bundles additional security fixes including JWT validation hardening and path traversal protections, making upgrade the strongly preferred remediation path. If immediate upgrade is blocked, a targeted compensating control is to manually override the CORS configuration to restrict the allowed-origins list to only trusted, explicitly enumerated domains - removing the wildcard or overly permissive default - and to reject text/plain Content-Type on state-changing REST endpoints; note that restrictive CORS changes may break legitimate embedded or cross-origin notebook integrations and should be tested before production deployment. A secondary defense is to place Zeppelin behind a reverse proxy that enforces Origin header validation and rejects cross-origin mutation requests at the perimeter, though this does not address the WebSocket vector without explicit WebSocket Origin checking. Restricting Zeppelin to internal network access only reduces exposure to externally-hosted malicious pages but does not mitigate CSRF from internal attacker-controlled pages. The patched version 0.12.1 is confirmed by vendor release notes.