CVE-2026-77414
Description
A flaw was found in JSONata, a JSON query and transformation language. This vulnerability allows a remote attacker to execute arbitrary code with the privileges of the host process. By crafting malicious JSONata expressions, an attacker can bypass a security check, gaining unauthorized access to internal object mechanisms. This enables the execution of system commands, leading to a complete compromise of the affected system.
Statement
This Critical flaw in JSONata allows arbitrary code execution when processing specially crafted JSONata expressions. Red Hat products, such as OpenShift Serverless, Konflux, and Red Hat Developer Hub, that utilize JSONata for data transformation or query processing are affected if they handle untrusted input containing such expressions. Successful exploitation could lead to full system compromise with the privileges of the host process.
Mitigation
To mitigate this Critical vulnerability, ensure that all JSONata expressions processed by Red Hat products are sourced exclusively from trusted origins. Avoid processing untrusted or unvalidated JSONata expressions. If processing untrusted input is unavoidable, it must be performed within a strictly isolated and sandboxed environment to contain potential arbitrary code execution and limit its impact on the host system.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 9.8 | N/A | N/A |
| Attack Vector | Network | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | None | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | High | N/A | N/A |
| Integrity Impact | High | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Understanding the Weakness (CWE)
Confidentiality
Technical Impact: Read Application Data
An attacker could insert an expression that references private data, which is then included in the output.
Integrity
Technical Impact: Execute Unauthorized Code or Commands
An attacker could execute arbitrary expressions.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
