CVE-2026-113687

Apache Syncope is impacted by an improper isolation or compartmentalization vulnerability. An administrator with sufficient permissions for Implementations can create a malicious Groovy class to execute untrusted code on a separate thread, effectively bypassing the Groovy security sandbox . This ...