CVE-2026-91380

A flaw was found in the OpenJDK Utility component. An unauthenticated attacker with local system access or the ability to supply data to affected application programming interfaces (APIs) can exploit this vulnerability. Successful exploitation can result in unauthorized data access, allowing an attacker to read confidential information as well as modify or delete application data.

This vulnerability is rated Moderate for Red Hat products because exploitation requires local access or direct exposure of vulnerable Preferences APIs to untrusted input, combined with high execution complexity that limits impact to partial confidentiality and integrity loss. In typical Red Hat Enterprise Linux and containerized Java deployments, applications rarely expose the underlying utility interfaces directly to unauthenticated external actors. Consequently, system-level compromise is not possible, and any potential threat remains restricted to the boundaries of the executing Java runtime process.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.