Apache APISIX Java Plugin Runner vulnerabilities

1 known vulnerability in Apache APISIX Java Plugin Runner from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Apache APISIX Java Plugin Runner: Incorrect Permission Assignment for Critical Resource

  CVE-2025-27446Jul 6, 2025Apache

  Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner). Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIX(java-plugin-runner