EUVD-2026-40001
GHSA-w346-wxvq-p3xr
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable build tool processing untrusted grammar files; no authentication or interaction required; impact limited to low-confidentiality file read only.
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component tokenVocab Grammar Option Handler. The manipulation results in path traversal. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Path traversal in ANTLR4 up to 4.13.2 exposes arbitrary file read via the tokenVocab grammar option handler. The vulnerable function getImportedVocabFile in TokenVocabParser.java fails to sanitize user-controlled grammar option values, allowing an attacker to supply a crafted .g4 grammar file that causes the tool to read files outside the intended working directory. A publicly available proof-of-concept exploit exists (GitHub issue reference), and no vendor patch has been released - the vendor did not respond to disclosure. No active exploitation is confirmed in CISA KEV, but the CVSS 4.0 E:P flag confirms exploit code is public.
Technical ContextAI
ANTLR4 (ANother Tool for Language Recognition, version 4) is a widely used Java-based parser generator. The affected code path is in tool/src/org/antlr/v4/parse/TokenVocabParser.java, specifically the getImportedVocabFile function, which handles the tokenVocab grammar option. This option instructs ANTLR4 to load token vocabulary definitions from an external file. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory - Path Traversal): the function does not canonicalize or validate the file path derived from the tokenVocab grammar option value, allowing sequences like ../../etc/passwd to escape the project directory. The CPE cpe:2.3:a:antlr:antlr4:*:*:*:*:*:*:*:* confirms all versions through 4.13.2 are affected. Because ANTLR4 is a build-time tool run in developer environments and CI/CD pipelines, the attack surface exists wherever untrusted grammar files are processed.
RemediationAI
No vendor-released patch has been identified at the time of analysis - the vendor did not respond to the coordinated disclosure. As a primary compensating control, avoid processing grammar files from untrusted or externally controlled sources; restrict the ANTLR4 tool to only processing grammar files from trusted, version-controlled repositories. In CI/CD pipelines, implement filesystem sandbox restrictions (e.g., using Docker with read-only volume mounts or seccomp profiles) to limit the directories accessible to ANTLR4 during grammar processing - this mitigates the traversal without requiring a code fix but adds pipeline configuration overhead. Additionally, review any tokenVocab grammar option values in .g4 files for path traversal characters (../) before build execution. Monitor the upstream ANTLR4 repository at https://github.com/antlr/antlr4 and the VulDB entry https://vuldb.com/vuln/374497 for patch availability. The public exploit is tracked at https://github.com/wooyun123/wooyun/issues/8.
Oracle Java SE 7 Update 6 and earlier contains multiple sandbox bypass vulnerabilities via the ClassFinder and forName m
Remote code execution in IBM Sterling B2B Integrator, Sterling Integrator, and Tivoli Common Reporting allows unauthenti
Java Runtime Environment sandbox bypass via incorrect image channel verification in 2D component allows remote unauthent
Oracle Java SE JDK/JRE 7 and 6 Update 27 and earlier allows remote code execution with complete system compromise throug
JBoss Seam 2 in Red Hat JBoss EAP 4.3.0 fails to sanitize JBoss Expression Language inputs, allowing remote attackers to
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Up
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allow
Remote unauthenticated attackers can execute arbitrary code on Adobe ColdFusion servers through Java deserialization fla
The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.3 | Affected |
| openSUSE Leap 15.4 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today