← CVE Intelligence

CVE-2025-27446

Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges PUBLISHED

Description (CNA)

Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner). Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0. Users are recommended to upgrade to version 0.6.0 or higher, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache APISIX Java Plugin Runneraffected 0.2.0 through 0.5.0

CWE

CWE-732

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.