{"action":"Upgrade com.hazelcast:hazelcast to 5.7.0 or later.","affected":[{"fixed":"5.7.0","introduced":"5.6.0"},{"fixed":"5.7.0","introduced":"5.5.0"},{"fixed":"5.7.0","introduced":"0"}],"component":"com.hazelcast:hazelcast","cve_ids":["CVE-2026-107725"],"ecosystem":"Maven","epss":0.00385,"exploited":false,"fixed_versions":["5.7.0"],"ghsa_id":"GHSA-w294-6q5q-53p8","id":"tcs_01M5N9F58NCVNBC297S3NHNBKP","modified_at":"2026-10-08T22:30:41.153421838Z","published_at":"2026-10-08T22:09:34Z","references":["https://osv.dev/vulnerability/GHSA-w294-6q5q-53p8","https://github.com/hazelcast/hazelcast/security/advisories/GHSA-w294-6q5q-53p8","https://github.com/hazelcast/hazelcast/commit/5d68f4828e2a914398a39f12fe11cafd335cefe0","https://docs.hazelcast.com/hazelcast/5.7/release-notes/community","https://docs.hazelcast.com/hazelcast/5.7/release-notes/releases","https://github.com/hazelcast/hazelcast"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-w294-6q5q-53p8","url":"https://osv.dev/vulnerability/GHSA-w294-6q5q-53p8"},{"source":"nvd","source_id":"CVE-2026-107725","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107725"}],"summary":"Hazelcast has an authorization bypass in IMap Predicates API"}