CVE-2025-70974 | Alibaba Fastjson up to 1.2.47 inclusion of functionality from untrusted control sphere

January 9, 2026 Yanac

A vulnerability classified as critical has been found in Alibaba Fastjson up to 1.2.47. Affected by this vulnerability is an unknown functionality. The manipulation leads to inclusion of functionality from untrusted control sphere.

This vulnerability is documented as CVE-2025-70974. The attack can be initiated remotely. Additionally, an exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More