Orkes Conductor 3.21.21-3.30.1 - Remote Code Execution

Orkes Conductor from 3.21.21 before 3.30.2 is vulnerable to unauthenticated remote code execution. The INLINE workflow task evaluates a user-supplied JavaScript expression in a GraalVM context created with HostAccess.ALL, so an unauthenticated attacker can reflect from the bound input object to...

CVE-2026-75840 ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex

ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validate package names. Attackers with trigger creation privileges can use Java.type to access java.util.zip.ZipFile or...

CVE-2026-75840

ArcadeDB versions before 26.8.1 have an arbitrary file read flaw in the GraalVM JavaScript sandbox: the allowlist regex is unescaped, letting users with trigger creation privileges call Java.type() to access java.util.zip.ZipFile or java.util.jar.JarFile and read any file the server process can a...

CVE-2026-75840 ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex

ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validate package names. Attackers with trigger creation privileges can use Java.type to access java.util.zip.ZipFile or...