A vulnerability (CVE-2024-20926) exists in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition within the Scripting component. It affects specific supported versions including Oracle Java SE 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK 17.0.9; and Oracle GraalVM Enterprise Edition 20.3.12, 21.3.8, and 22.3.4. The flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized access to critical data. The vulnerability can be exploited through APIs, such as those used by web services, and also affects Java deployments running sandboxed Java Web Start applications or applets that load untrusted code. The CVSS 3.1 base score is 5.9, indicating a medium severity with confidentiality impact only.