CVE-2025-13426

creationtimestamp| type| source ---|---|--- 2025-12-05 22:54:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ble5walr2n...

CVE-2025-13426 Improper Sandboxing in Google Apigee's JavaCallout Policy Allows for Remote Code Execution

A vulnerability exists in Google Apigee's JavaCallout policy https://docs.apigee.com/api-platform/reference/policies/java-callout-policy that allows for remote code execution. It is possible for a user to write a JavaCallout that injected a malicious object into the MessageContext to execute...