Apache Software Foundation Apache Apisix Java Plugin Runner vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_apisix_java_plugin_runner.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2025-27446HIGHCVSS 7.8≥ 0.2.0, ≤ 0.5.02025-07-06
CVE-2025-27446 [HIGH] CWE-732 CVE-2025-27446: Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-run Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner). Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0. Users are recommended to upgrade to version 0.6.0 or higher, w
cvelistv5nvd