CVE-2025-59059

published 2026-03-03

CVE-2025-59059: Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0.
Users are recommended to upgrade to version 2.8.0, which fixes this issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	ranger	< 2.8.0	2.8.0
apache_software_foundation	apache_ranger	<= 2.7.0	—

CWE-94