CVE Catalog
CVE-2026-55799
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.34%
27th percentile - higher than 27% of all known CVEs
Summary
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue.
Risk Assessment
Remote code execution could allow an attacker to fully compromise the system, posing a critical threat to security and data integrity.
Recommendation
Immediately upgrade Apache Ranger to version 2.9.0 or later and restrict access to components that execute scripts.
Original NVD description (English source)
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.