CVE-2025-7788 | Xuxueli xxl-job up to 3.1.1 SampleXxlJob.java commandJobHandler os command injection (Issue 3750)

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical. Affected by this vulnerability is the function commandJobHandler of the file srcmainjavacomxxljobexecutorservicejobhandlerSampleXxlJob.java. The manipulation leads to os command injection.

This vulnerability is known as CVE-2025-7788. The attack can be launched remotely. Furthermore, there is an exploit available.