CVE-2026-91398

A flaw was found in OpenJDK. An unauthenticated remote attacker with network access can exploit this vulnerability through the SOCKS5 (Socket Secure) networking protocol to compromise data integrity. Successful exploitation allows unauthorized creation, modification, or deletion of application data and can extend beyond the Java environment to impact related systems.

This vulnerability is rated as having Moderate severity for Red Hat products because exploitation requires complex conditions involving specific SOCKS5 proxy protocol handling and does not directly lead to unauthorized disclosure of confidential information or denial of service. In typical Red Hat Enterprise Linux and containerized deployments, Java runtime environments do not commonly rely on SOCKS5 proxies across untrusted network perimeters. The risk is largely confined to specific architectures where applications explicitly establish SOCKS5 connections with untrusted intermediary proxies or accept arbitrary proxy configuration parameters from untrusted actors.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.