CVE-2026-94301

Summary

This flaw allows for an allow-list bypass via java.lang.reflect.Proxy, enabling unauthorized access. It matters because it can lead to remote code execution or data leakage.

Exploitability

Exploitation is moderately hard as it requires specific conditions and knowledge of the affected versions. Precondition is the use of vulnerable versions of MINA 2.0.X and 2.1.X.

Blast radius

If exploited, this could result in unauthorized access, data theft, or remote code execution across affected systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to MINA 2.0.30 or later, and 2.1.14 or later, to address the vulnerability.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.