CVE-2021-41033

CVE-2021-41033 is a high-severity vulnerability affecting all released versions of Eclipse Equinox up to 4.21. It allows a man-in-the-middle attacker to alter local installations by serving malicious p2 metadata when using unencrypted HTTP p2 repositories. This can lead to the installation of malicious plug-ins capable of executing arbitrary code, resulting in a complete compromise of confidentiality, integrity, and availability. While the attack complexity is high, there is currently no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.