Liufeng Yi

An issue exists in Apache StreamPark that allows authenticated users to trigger remote command execution.

The software is susceptible to a remote code execution issue stemming from a malicious XML deserialization flaw within the SnakeYaml component. This issue can only be exploited by authorized attackers.