CVE-2025-59059 — Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator

CVE-2025-59059

Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator PUBLISHED

Description (CNA)

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Ranger	affected 0 through 2.7.0

CWE

CWE-94

References

https://lists.apache.org/thread/z47q86rho80390lf2qcmoc2josvs0gtv

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/03/02/5

CISA-ADP

No English description supplied.

No references supplied.