Most recent entries from all

bdu:2026-00212

2026-10-09T02:20:14.591477+00:00

bdu:2026-00212

BIT-apisix-2025-27446 — Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to el…

2026-10-09T02:20:14.591515+00:00

Affected: Bitnami: apisix

Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner).

Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0.

Users are recommended to upgrade to version 0.6.0 or higher, which fixes the issue.

cnvd-2025-20873

2026-10-09T02:20:14.591551+00:00

cnvd-2025-20873

EUVD-2026-272927

2026-10-09T02:20:14.591565+00:00

EUVD-2026-272927

fkie_cve-2025-27446

2026-10-09T02:20:14.591576+00:00

Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner).

Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0.

Users are recommended to upgrade to version 0.6.0 or higher, which fixes the issue.

GHSA-xm8v-g828-5x9r

2026-10-09T02:20:14.591597+00:00

Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner).

Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0.

Users are recommended to upgrade to version 0.6.0 or higher, which fixes the issue.