CVE-2025-61748

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 21.0.8 and 25 Oracle GraalVM for JDK version 21.0.8 Oracle GraalVM Enterprise Edition version 21.3.15

Description A difficult to exploit issue exists in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, specifically within the Libraries component. An unauthenticated attacker with network access via multiple protocols can compromise the software. Successful exploitation may lead to unauthorized modification of data accessible to Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. The issue can be exploited through APIs, such as via a web service supplying data to these APIs. It also affects Java deployments that load and run untrusted code, relying on the Java sandbox for security.

Recommendations Update Oracle Java SE to a version later than 21.0.8 and 25. Update Oracle GraalVM for JDK to a version later than 21.0.8. Update Oracle GraalVM Enterprise Edition to a version later than 21.3.15.