wolfram research Cloud vulnerabilities

Latest wolfram research Cloud CVEs

Newest publication first

1. CVE-2025-11919 Unprotected temporary directories in Wolfram Cloud may result in privilege escalation

   Published 2026-06-26

   Critical·CVSS 9.6 EPSS 0.49%

   The default JVM can access files and directories under /tmp/ including the $TemporaryDirectory of other users on the same cloud instance (/tmp/UserTemporaryFiles/). The -init file for the the JVM initialization exists in the vulnerable directory during the startup of the JVM. An...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.