An authenticated user able to rename a note or perform folder operations can embed directory traversal segments in the note or folder name. Because the server constructs filesystem paths from those names without validating that the resulting path stays inside the configured notebook root, the attacker can move, overwrite, or delete files outside that root. The effect is that notebook data can be corrupted or other filesystem content can be destroyed, potentially exposing sensitive information if the appointment is performed on a shared filesystem or Hadoop cluster.

Apache Zeppelin versions 0.9.0 through 0.12.0 are affected. The vulnerability exists when the FileSystemNotebookRepo is enabled and the attacker has rename or folder operation permissions.

The CVSS score of 6.5 indicates moderate severity. The EPSS score of less than 1% suggests that exploitation is unlikely at present. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires an authenticated account with rename or folder operation rights, meaning a compromised or sufficient-privilege user could trigger the path traversal. While the impact could be significant, the combination of authentication requirement and low exploit probability reduces the overall risk at this time.