Package · Maven

org.apache.flink:flink-table-runtime

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.1

CVE-2026-35194 Public exploit

Apache Flink: Remote code execution via SQL injection in code generation

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affe…

Apache Software Foundation Apache Flink org.apache.flink:flink-table-api-java org.apache.flink:flink-table-planner_2.12 Maven

May 15, 2026