CVE-2026-86512 | java-json-tools json-patch up to 1.13 Copy Move Operations CopyOperation.java CopyOperation.apply/MoveOperation.apply access control (Issue 170)

September 7, 2026 Yanac

A vulnerability was found in java-json-tools json-patch up to 1.13. It has been rated as critical. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipulation leads to improper access controls.

This vulnerability is referenced as CVE-2026-86512. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More