CVE-2026-52691

The Apache Griffin Hive Metastore Module is vulnerable to SQL injection (CWE-89) caused by improper neutralization of special elements in SQL commands, affecting all versions of the product. An attacker with low privileges and network access to the module can trigger the flaw via crafted input, potentially reading, modifying, or corrupting metadata stored in the Hive Metastore database. Because the component is retired, there is no patched release, so every deployment of Griffin's Hive Metastore Module remains permanently vulnerable. Only organizations still running Apache Griffin — an unsupported data-quality service — are affected. No public proof-of-concept, KEV listing, or known in-the-wild exploitation has been reported, and the 0.3% EPSS score indicates low expected exploitation in the next 30 days.

What to do: No patched version exists, so restrict network access to the Griffin Hive Metastore instance to trusted users only (per the Apache advisory) and review whether it is exposed beyond trusted internal segments. Consider fronting the service with input-validation or WAF rules that block SQL injection patterns, and plan a migration to an alternative, maintained data-quality/metadata solution. Audit any remaining Griffin deployments for unusual metastore database queries.