This vulnerability affects Oracle Java SE and Oracle GraalVM products in their libraries component, allowing unauthenticated attackers with network access to modify accessible data via update, insert, or delete operations. The attack surface includes APIs exposed over multiple protocols and sandboxed Java applications that load untrusted code. The vulnerability is rated low severity with a CVSS 3.1 score of 3.7, indicating a difficult-to-exploit issue with integrity impact but no confidentiality or availability impact. Oracle's October 2025 Critical Patch Update advisory addresses this vulnerability among 374 others, emphasizing the importance of applying patches promptly to mitigate exploitation risks.

Successful exploitation can result in unauthorized modification (update, insert, or delete) of some accessible data within Oracle Java SE and Oracle GraalVM environments. There is no impact on confidentiality or availability. The vulnerability requires network access and is difficult to exploit. No known exploits in the wild have been reported as of the advisory date.

Oracle has included this vulnerability in its October 2025 Critical Patch Update advisory, which contains security patches addressing this and numerous other vulnerabilities. Customers are strongly advised to apply the October 2025 Critical Patch Update promptly to mitigate this vulnerability. Since no direct patch link is provided, users should refer to Oracle's official advisory at https://www.oracle.com/security-alerts/cpuoct2025.html for patch availability and installation instructions. No alternative mitigations or workarounds are specified in the advisory.