Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-55799 EUVD-2026-55249GHSA-gh8f-2p9r-x68c

Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator

Published Aug 10, 2026 · Updated Aug 12, 2026 · Assigned by apache

Description

Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0
Users are recommended to upgrade to version 2.9.0, which fixes this issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Ranger ≤ 2.8.0 —

References