Executive brief
WildFly Core is a core management library used by Red Hat JBoss application servers to deploy and manage applications. An authenticated attacker with deployer permissions can upload and deploy a malicious archive file to the server, potentially leading to arbitrary code execution and further compromise of the system.
Technical details
The vulnerability exists in WildFly Core's handling of archive file uploads and deployment. An authenticated attacker with 'deployer' role privileges can craft a malicious Java project and send an HTTP POST request to upload a weaponized archive file from an untrusted source. The vulnerability lies in insufficient validation of deployed archives before execution, allowing an attacker to bypass security controls. Exploitation requires network access to the management interface and valid 'deployer' account credentials. Successful exploitation can lead to arbitrary file read and potentially remote code execution on the server.
Affected products
- Red Hat WildFly Core
Timeline
- 2026-08-11: disclosed