A vulnerability labeled as critical has been found in Apache Ranger up to 2.6.x. This affects an unknown part of the component NashornScriptEngineCreator. Executing a manipulation can lead to privilege escalation.
This vulnerability is handled as CVE-2025-59059. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.