oss-sec: CVE-2025-59059: Apache Ranger: Remote Code Execution Vulnerability in ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Remote Code Execution Vulnerability in Apache Ranger Identified A critical remote code execution vulnerability, CVE-2025-59059, has been discovered in Apache Ranger, specifically affecting the NashornScriptEngineCreator. This vulnerability allows unauthenticated remote attackers to execute arbitrary code, posing a significant risk to affected systems. Immediate action is recommended to mitigate potential exploitation. 2 sources 71