CVE-2025-61755: Low severity Oracle GraalVM for JDK vulnerability

Published Oct 21, 2025

Updated

Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.16 and 21.0.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM for JDK accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

3 affected components

Oracle GraalVM for JDK

Oracle GraalVM for JDK=17.0.16

Oracle GraalVM for JDK=21.0.8

Event History

Oct 21, 2025

CVE Published

via MITRE·08:03 PM

Data Sourced

via MITRE·08:03 PM

DescriptionSeverity

Data Sourced

via NVD·08:20 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-61755?

CVE-2025-61755 is considered a difficult to exploit vulnerability that can be leveraged by unauthenticated attackers with network access.

How do I fix CVE-2025-61755?

To mitigate CVE-2025-61755, users should update their Oracle GraalVM for JDK to the latest available version.

What versions of Oracle GraalVM for JDK are affected by CVE-2025-61755?

CVE-2025-61755 affects Oracle GraalVM for JDK versions 17.0.16 and 21.0.8.

Can CVE-2025-61755 be exploited remotely?

Yes, CVE-2025-61755 can be exploited remotely by unauthenticated attackers with network access.

What component of Oracle Java SE does CVE-2025-61755 impact?

CVE-2025-61755 impacts the Compiler component of the Oracle GraalVM for JDK product.