Skip to main content

CISA issues update on Wolfram Cloud JVM temporary directory vulnerability

Source Decision Insights Threat Desk Published November 26, 2025 Companies 1
Human View Machine View

323rd article in the last 90 days, one of 431 articles referencing Cybersecurity and Infrastructure Security Agency (CISA). Previous coverage: CISA releases thirteen advisories on industrial control systems vulnerabilities (Nov 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
Which to buy
Adoption curve
Early Majority
Industry
Information Technology / Software & Services / IT Services / Data Processing & Outsourced Services

Our classification, not the publisher's statement. Best suited for, not only for.

Wolfram Cloud version 14.2 includes a vulnerability in its Java Virtual Machine (VM) (JVM) implementation that exposes unrestricted access to temporary directories within the cloud environment, potentially allowing privilege escalation and remote code execution. This flaw affects the multi-tenant setup of the platform where temporary folders can be accessed across users within the same cloud instance.

The issue identified as CVE-2025-11919 arises in Wolfram Cloud versions up to 14.2. The vulnerability is linked to the shared /tmp/ directory used by the instance kernel and the JVM initialization process. A race condition in the JVM startup allows malicious actors to manipulate the classpath by exploiting the shared /tmp/ directory. This is possible if the attacker can predict the timing of JVM launches and access unprotected temporary directories. The problem stems from the hosting platform's method of managing temporary file permissions within the multi-tenant environment, which permits cross-user access to these directories.

Exploitation of this vulnerability can result in complete control over software execution, leading to total information disclosure on the affected system. The outcomes include privilege escalation, the extraction of sensitive information, and remote code execution capabilities for an attacker accessing the shared temporary directory.

Resolution for this vulnerability involves upgrading the Wolfram Cloud to version 14.2.1 as recommended by CERT/CC. This update addresses the race condition and secures the JVM initialization against classpath poisoning in the multi-tenant context.

CERT/CC advises users of Wolfram Cloud version 14.2 to apply the available update promptly to remediate this vulnerability and reduce the risk of unauthorized access to temporary directories. This advisory was authored by Laurie Tyzenhaus and Renae Metcalf, with acknowledgment given to Peter Roberge of Pointer Cybersecurity for reporting the issue.

Blog post, originally published at kb.cert.org.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-issues-update-on-wolfram-cloud-jvm-temporary-directory-vulnerability/",
        "name": "CISA issues update on Wolfram Cloud JVM temporary directory vulnerability",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-issues-update-on-wolfram-cloud-jvm-temporary-directory-vulnerability/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
      "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Software & Services / IT Services / Data Processing & Outsourced Services"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T13:37:29-06:00",
    "datePublished": "2025-11-26T01:26:30-07:00",
    "description": "Wolfram Cloud version 14.2 has a vulnerability allowing JVM access to shared /tmp/ directories, leading to privilege escalation; update to 14.2.1 advised.",
    "headline": "CISA issues update on Wolfram Cloud JVM temporary directory vulnerability",
    "isBasedOn": {
      "@type": "CreativeWork",
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://kb.cert.org/vuls/id/553375"
    },
    "keywords": [
      "Cloud",
      "Multitenant",
      "Virtual Machine",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-issues-update-on-wolfram-cloud-jvm-temporary-directory-vulnerability/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages