CVE-2026-83378

A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to Compiler component APIs (Application Programming Interfaces), such as through a web service. A successful attack can allow unauthorized modification or deletion of accessible application data, as well as unauthorized read access to sensitive information.

Red Hat has evaluated this vulnerability as having a Moderate severity impact because successful exploitation requires high attack complexity, relying on specific execution paths and timing to trigger erroneous compiler loop optimizations. While network-facing Java services might accept untrusted payloads, weaponizing this issue to alter application state or access internal process memory demands precise control over JIT-compiled method loops. Earlier Java LTS versions in Red Hat Enterprise Linux do not contain the vulnerable compilation routines, limiting exposure to newer runtime releases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.