[ CVE-2026-97400 · Published 20 Oct 2026 ]
Vulnerability in Eclipse Foundation Eclipse OpenJ9
CVSS 6.8
EPSS <1%No fix listed yet
[ Description ]Official description
In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the analyst's machine to read an arbitrary local file named inside the bundle and send its contents to an arbitrary remote host.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.