Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-11919— Unprotected temporary directories in Wolfram Cloud may result in privilege escalation

Quick assessment

Affected
Wolfram Research Inc. Cloud
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Wolfram Cloud是美国Wolfram公司的一个计算云平台。 Wolfram Cloud 14.2版本存在权限许可和访问控制问题漏洞，该漏洞源于默认JVM可访问/tmp/目录下文件及同一云实例其他用户的临时目录，同时JVM启动时-init文件存在于该目录，导致具有共享/tmp/空间访问权限的攻击者可抢占创建或替换.jar文件，通过在classpath中放置恶意库版本，造成加载恶意类并执行任意代码。

AI Predicted 7.8 Difficulty: Easy EPSS 0.49% · P41

Affected Version Matrix 1

VendorProduct Version RangeStatus
Wolfram Research Inc. Cloud 14.2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-11919

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Unprotected temporary directories in Wolfram Cloud may result in privilege escalation
Source: CVE Program / CVE List V5
Vulnerability Description
The default JVM can access files and directories under `/tmp/` including the `$TemporaryDirectory` of other users on the same cloud instance (`/tmp/UserTemporaryFiles/`). The `-init` file for the the JVM initialization exists in the vulnerable directory during the startup of the JVM. An attacker with access to the shared `/tmp/` space can preemptively create or replace `.jar` files or directories (via the `-init` file) that the victim JVM will resolve first in its classpath. By strategically placing a malicious version of a commonly used library (e.g., `commons-io`) in a location that is included in the classpath before the legitimate version, an attacker can cause the JVM to load the malicious class during startup, thereby executing the attacker's code.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Wolfram Cloud 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Wolfram Cloud是美国Wolfram公司的一个计算云平台。 Wolfram Cloud 14.2版本存在权限许可和访问控制问题漏洞，该漏洞源于默认JVM可访问/tmp/目录下文件及同一云实例其他用户的临时目录，同时JVM启动时-init文件存在于该目录，导致具有共享/tmp/空间访问权限的攻击者可抢占创建或替换.jar文件，通过在classpath中放置恶意库版本，造成加载恶意类并执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Wolfram Research Inc. Cloud 14.2 -

II. Public POCs for CVE-2025-11919

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-11919

请登录查看更多情报信息。

Other References for CVE-2025-11919 (1)

IV. Related Vulnerabilities

Same product: Cloud

V. Comments for CVE-2025-11919

No comments yet

Leave a comment