-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| apache-airflow-providers-apache-hive | pip | < 4.1.0 | 4.1.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper neutralization of special elements in OS commands. The Hive Provider's HiveCliHook.run_cli method was found to directly incorporate user-controlled schema parameters into Hive CLI commands without adequate validation(). The associated GitHub PR #27647 specifically addresses schema validation, indicating this was the injection vector. Command injection would occur when attackers provide malicious schema names containing shell metacharacters that get interpreted by the system shell.
A Semantic Attack on Google Gemini - Read the Latest Research