CVE-2025-59059

CRITICAL

Apache Ranger <= 2.7.0 - Remote Code Execution via NashornScriptEngineCreator

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-59059. PoCs published by pl4tyz.

AI-analyzed exploit summary This repository provides a detailed technical analysis correcting misattributions in CVE-2025-59059, identifying the actual vulnerable class (`RecordFilterJavaScript`) and explaining the exploitability constraints. It includes static code analysis and patch diff insights.

Description

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.

Exploits (1)

nomisec WRITEUP
by pl4tyz · poc
https://github.com/pl4tyz/CVE-2025-59059-Misattributed-RCE-in-Apache-Ranger-Static-Analysis-Correction

This repository provides a detailed technical analysis correcting misattributions in CVE-2025-59059, identifying the actual vulnerable class (`RecordFilterJavaScript`) and explaining the exploitability constraints. It includes static code analysis and patch diff insights.

Classification
Writeup 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Apache Ranger <= 2.7.0
Auth required
Prerequisites: Policy admin access in Apache Ranger · Target running on JDK 8-14 (Nashorn present)
devstral-2 · analyzed Apr 09, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0010
EPSS Percentile 27.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-94
Status published
Products (2)
apache/ranger < 2.8.0
org.apache.ranger/ranger-plugins-common 0 - 2.8.0Maven
Published Mar 03, 2026
Tracked Since Mar 03, 2026