CVE-2025-27446
Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges
Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner). Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0. Users are recommended to upgrade to version 0.6.0 or higher, which fixes the issue.
Reserved 2025-02-26 | Published 2025-07-06 | Updated 2025-07-06 | Assigner apacheCWE-732 Incorrect Permission Assignment for Critical Resource
Benoit TELLIER
lists.apache.org/thread/qwxnxolt0j5nvjfpr0mlz6h7nrtvyzng
Support options
