CVE-2024-41169

The attacker can use the raft server protocol in an unauthenticated way. The attacker can see the server's resources, including directories and files. This issue affects Apache Zeppelin: from 0.10.1 up to 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue by removing the Cluster Interpreter.

• CWE-664

• https://github.com/apache/zeppelin/pull/4841Patch, Vendor Advisory
• https://issues.apache.org/jira/browse/ZEPPELIN-6101Issue Tracking, Patch
• https://lists.apache.org/thread/moyym04993c8owh4h0qj98r43tbo8qddIssue Tracking, Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2025/07/13/1

Published

Jul 12, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41163A directory traversal vulnerability exists in the archive fu…7.5
• CVE-2024-41164When TCP profile with Multipath TCP enabled (MPTCP) is confi…7.5
• CVE-2024-41165A library injection vulnerability exists in Microsoft Word 1…9.1
• CVE-2024-41166Stack-based buffer overflow in some Intel(R) PROSet/Wireless…6.1
• CVE-2024-41167Improper input validation in UEFI firmware in some Intel(R) …6.7
• CVE-2024-41168Use after free in some Intel(R) PROSet/Wireless WiFi and Kil…7.4
• CVE-2024-4117A vulnerability was found in Tenda W15E 15.11.0.14 and class…8.8
• CVE-2024-41170A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2024-41171A vulnerability has been identified in SINUMERIK 828D V4 (Al…9.3
• CVE-2024-41172In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and …7.5
• CVE-2024-41173The IPC-Diagnostics package included in TwinCAT/BSD is vulne…7.8
• CVE-2024-41174The IPC-Diagnostics package in TwinCAT/BSD is susceptible to…7.3