Hazelcast IMap Predicates API Authorization Bypass
A critical vulnerability (CVE-2026-107725, CVSS 8.7) was discovered in Hazelcast's IMap Predicates API, allowing malicious clients to execute arbitrary code on Hazelcast members. Affected versions include Hazelcast 5.6.0, 5.5.0-5.5.9, and 5.4.0-5.4.4. Immediate upgrade to fixed versions is recommended.