CVE-2026-92125: Groovy Ast Transform Missing Groovyasttransformationclasscve-2026-92125-groovy-ast-transform-missing-groovyasttransformationclass
A Groovy sandbox AST transformation blocklist blocks ASTTest but omits GroovyASTTransformationClass. Attackers can use @GroovyASTTransformationClass to invoke arbitrary AST transformations during script compilation, bypassing sandbox restrictions to execute arbitrary code.
