This vulnerability in wildfly-core allows a remote attacker authenticated as a 'deployer' account to import and deploy a malicious archive file from an untrusted source. The attacker leverages WildFly libraries to craft a Java project that enables an HTTP POST request to upload and deploy the malicious archive. Successful exploitation could lead to arbitrary file read vulnerabilities. The vulnerability is rated moderate because it requires high privileges (authenticated deployer) and does not affect availability. The vulnerability is tracked as CVE-2026-24330 with a CVSS v3.1 score of 6.5.

An attacker authenticated as a 'deployer' can deploy malicious archives, potentially leading to arbitrary file read vulnerabilities and compromise of confidentiality and integrity. There is no impact on availability. The attack vector is network-based with low complexity and no user interaction required. The vulnerability does not allow unauthenticated exploitation, limiting its impact to those with deployer privileges.

No official patch or fix is currently confirmed. Mitigation involves restricting access to the 'deployer' account to authorized and trusted administrators only, implementing strong authentication policies, and limiting deployer permissions to prevent deployment of untrusted applications. WildFly management interfaces should not be exposed to untrusted networks, and only verified and signed applications should be permitted for deployment. If the 'deployer' role is not necessary, consider disabling or removing it. Configuration changes may require a service restart. Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-24330 for updates.