CVE-2026-83368

Name of the Vulnerable Software and Affected Versions Oracle GraalVM for JDK 17 version 23.0.13.1 Oracle GraalVM for JDK 21 version 23.1.12.1 Oracle GraalVM Enterprise Edition version 21.3.19.1 Oracle GraalVM version 25.0.4.1

Description A flaw in the Compiler component of Oracle GraalVM products allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critical data, the ability to update, insert, or delete accessible data, and the potential to cause a partial denial of service (partial DOS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.