RCE in Apache Software Foundation Ranger

CVE-2026-28672

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8.

Vulnerability class: Command Injection (OS Command Injection)