This vulnerability arises from improper input validation (CWE-20) in the OpenJDK packages distributed with Ubuntu. Specifically, the .jar MIME handlers installed by these packages will execute files marked as executable when the mailcap package is present. An attacker controlling a sandboxed application that can access the OpenURI portal through xdg-desktop-portal-gtk can write a malicious .jar file to the host filesystem, set its executable bit, and cause the handler to execute arbitrary code outside the sandbox environment, effectively escaping the sandbox restrictions.

Successful exploitation allows an attacker with limited privileges inside a sandboxed environment to execute arbitrary code on the host system with the privileges of the user running the OpenJDK environment. This leads to complete compromise of confidentiality, integrity, and availability of the affected system as indicated by the CVSS vector (C:H/I:H/A:H).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Until a fix is available, restricting installation or use of the mailcap package or limiting access to the OpenURI portal via xdg-desktop-portal-gtk may reduce risk, but these are not confirmed mitigations.