The vulnerability allows an attacker who can write to the shared /tmp directory of a Wolfram Cloud instance to place malicious .jar files that the default Java Virtual Machine will load before legitimate libraries during startup. The attacker can thereby execute arbitrary code in the context of the victim's JVM, effectively achieving privilege escalation or complete compromise of the cloud environment.

The affected systems are Wolfram Research Inc. Cloud instances that run the default JVM configuration exposing the /tmp/UserTemporaryFiles/ directory. No specific product versions are listed, so all instances that allow shared /tmp access are potentially vulnerable.

The CVSS score marks this as Critical, confirming the high severity of the described Remote Code Execution. Even without an EPSS score and without inclusion in CISA's KEV catalog, an attacker with write access to the shared /tmp space can preemptively place malicious libraries that the Vulnerable JVM will load first. The vulnerability requires only a lower‑privileged user on the same cloud instance to write to /tmp; once the attacker’s jar is placed, the JVM will load it automatically, giving the attacker control of the victim process.