Druid jackson security

Skill cxcscmu/SkillLearnBench/skills/b4-skill-creator-gemini-3.1-pro-preview/fix-security-bug/druid-jackson-security

[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.

Install

npx -y skills add cxcscmu/SkillLearnBench --skill druid-jackson-security

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

What its author says it does

Copied from the file, not written here

Securing Apache Druid's JavaScriptConfig deserialization. Use this skill whenever patching or securing Jackson deserialization in Druid, especially regarding the empty key ("") bypass.

SKILL.md

2.3 KB, 438 tokens by cl100k_base, as published. Nobody here has run it

Druid Jackson Deserialization Security

The Vulnerability

In Apache Druid 0.20.0, a vulnerability exists where authenticated attackers can execute arbitrary code by passing malicious JavaScript payloads. The vulnerability exploits a known Jackson deserialization behavior: when a class constructor uses @JacksonInject without specifying a property name or disabling user input, Jackson defaults the property name to "" (empty string).

Attackers can provide an empty key ("") in the JSON payload to override the safely injected JavaScriptConfig instance with a malicious one where enabled is set to true. This bypasses Druid's internal check that disables JavaScript by default.

Example Payload Fragment:

{
  "type": "javascript",
  "function": "function(){java.lang.Runtime.getRuntime().exec('malicious_command');}",
  "": {
    "enabled": true
  }
}

The Fix

To remediate this vulnerability, we must prevent JSON input from overriding the injected JavaScriptConfig. Jackson provides the OptBoolean.FALSE value for the useInput attribute of the @JacksonInject annotation precisely for this purpose.

For every occurrence of @JacksonInject JavaScriptConfig inside a @JsonCreator constructor, modify the annotation to explicitly reject input data:

import com.fasterxml.jackson.annotation.OptBoolean;

// ...

@JsonCreator
public MyJavaScriptComponent(
    // ...
    @JacksonInject(useInput = OptBoolean.FALSE) JavaScriptConfig config
)

By adding useInput = OptBoolean.FALSE, Jackson will ignore any JSON property (including "") that attempts to bind to the config parameter, and will exclusively use the JavaScriptConfig instance provided by the Guice injector.

Affected Classes

You should locate and patch the following classes that inject JavaScriptConfig: