Which versions of OpenAM are affected by CVE-2026-47424?

OpenAM Community Edition through version 16.0.6 contains an authenticated privilege escalation vulnerability allowing RealmAdmin users to escape sandbox restrictions and execute OS commands as the…. A patch is available.

How to fix or mitigate CVE-2026-47424?

Within 24 hours: Identify all OpenAM Community Edition deployments and versions in use; enumerate which users hold RealmAdmin privileges across all realms. Within 7 days: Upgrade all instances running version 16.0.6 or earlier to OpenAM Community Edition 16.1.1; perform functional testing of realms and administrative capabilities immediately post-upgrade. Within 30 days: Analyze authentication and administrative access logs for unauthorized script modifications or command execution; implement runtime monitoring of script execution by realm administrators.

OpenAM CVE-2026-47424

Q: What is the CVSS score of CVE-2026-47424?

CVE-2026-47424 has a CVSS 4.0 base score of 7.5 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

EUVD-2026-78367 HIGH

Protection Mechanism Failure (CWE-693)

2026-06-29 https://github.com/OpenIdentityPlatform/OpenAM

GHSA-69j4-qvqr-hpw3

RCE

7.5

CVSS 4.0 · Vendor: https://github.com/OpenIdentityPlatform/OpenAM

Severity by source

Vendor (https://github.com/OpenIdentityPlatform/OpenAM) PRIMARY

7.5 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.9 CRITICAL

Network-reachable console with low-privilege script-author auth (PR:L) and no user interaction; sandbox escape crosses realm-to-host trust boundary (S:C) yielding full OS command execution (C/I/A:H).

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (https://github.com/OpenIdentityPlatform/OpenAM).

CVSS VectorVendor: https://github.com/OpenIdentityPlatform/OpenAM

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Sep 15, 2026 - 10:33 vuln.today

Analysis Updated

Sep 15, 2026 - 10:33 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Sep 15, 2026 - 10:22 vuln.today

cvss_changed

CVSS changed

Sep 15, 2026 - 10:22 NVD

7.5 (HIGH)

Analysis Generated

Jun 29, 2026 - 18:21 vuln.today

DescriptionCVE.org

Summary

Description

A Protection Mechanism Failure (CWE-693) in OpenAM's server-side scripting sandbox allows an authenticated script author execute operating-system commands from the OpenAM JVM with the default class allow and deny lists. This impacts OpenAM Community Edition through version 16.0.6. This issue was patched in version 16.1.1.

Impact

An authenticated user (for example, a realm admin) who can create or edit server-side scripts for an executed context can run OS commands as the OpenAM application server admin. For a sub-realm RealmAdmin, this crosses the documented boundary from realm-scoped administration to JVM/host execution, effectively compromising the whole OpenAM process and every realm it serves. The sandbox is the only code-level defense between a realm script author and arbitrary JVM/OS execution.

Patch

This has been patched in OpenAM Community Edition version 16.1.1. Users are encouraged to update to the latest release.

AnalysisAI

Authenticated OS command execution in OpenAM Community Edition (OpenIdentityPlatform) up to 16.0.6: the Groovy server-side scripting sandbox fails to intercept the ProcessGroovyMethods#execute extension method, letting a script author run arbitrary OS commands as the OpenAM application server account. A realm-scoped administrator can therefore cross into full JVM and host compromise, affecting every realm served by that OpenAM instance. The vendor patched the sandbox in 16.1.1; no public exploit code and no CISA KEV listing were identified at time of analysis, and no EPSS score was supplied in the input.