Medium severityNVD Advisory· Published Oct 20, 2026· Updated Oct 20, 2026

CVE-2026-97400

Description

In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the analyst's machine to read an arbitrary local file named inside the bundle and send its contents to an arbitrary remote host.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Eclipse/Openj9llm-fuzzy
Range: <0.63

Patches

Vulnerability mechanics

References

github.com/eclipse-openj9/openj9/pull/25003nvd
gitlab.eclipse.org/security/cve-assignment/-/work_items/324nvd
gitlab.eclipse.org/security/vulnerability-reports/-/work_items/949nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000