Apache Flink vulnerabilities

Latest Apache Flink CVEs

Newest publication first

1. CVE-2026-35194 Apache Flink: Remote code execution via SQL injection in code generation

   Published 2026-05-15

   High·CVSS 8.1 EPSS 0.38%

   Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affects JSON functions (1...

2. CVE-2020-17519 Apache Flink directory traversal attack: reading remote files through the REST API

   Published 2021-01-05

   High·CVSS 7.5 EPSS 98.0% CISA KEV added 2024-05-23 Exploited in the wild Public exploit PoC

   A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager proc...

3. CVE-2020-17518 Apache Flink directory traversal attack: remote file writing through the REST API

   Published 2021-01-05

   High·CVSS 7.5 EPSS 49.4%

   Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Fl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.