A newly disclosed vulnerability in Apache SeaTunnel, a popular distributed data integration platform, has raised alarms in the cybersecurity community. The flaw, tracked as CVE-2025-32896, allows unauthorized users to exploit insecure REST API endpoints, enabling arbitrary file read and potentially remote code execution (RCE) through deserialization attacks. The issue affects SeaTunnel versions 2.3.1 through 2.3.10 […] The post Apache SeaTunnel Flaw Lets Unauthorized Users Launch Deserialization Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
First seen on gbhackers.com
Jump to article: gbhackers.com/apache-seatunnel-flaw/
![]()

