Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0.
Users are recommended to upgrade to version 2.…

A remote code execution vulnerability has been identified in the NashornScriptEngineCreator component of Apache Ranger versions 2.7.0 and earlier. This vulnerability allows attackers to execute arbitrary code remotely on affected systems. The issue affects all Apache Ranger installations running versions up to and including 2.7.0. Users are strongly recommended to upgrade to version 2.8.0, which contains a fix for this security flaw. The vulnerability has been assigned CVE-2025-59059 and is considered high severity due to the potential for complete system compromise through remote code execution.