GraalVM is a high-performance runtime and execution platform for multiple languages, including JavaScript and other scriptable runtimes used by application frameworks. In systems like workflow engines, it can sit behind a script evaluation path and interpret user-supplied expressions or embedded task logic on the server.
In cyber security, that makes GraalVM a sensitive trust boundary. If an attacker can reach a script evaluator and influence the code or expression being processed, the runtime may become the place where input turns into code execution. Defenders care because bugs in parsing, sandboxing, or access control around the evaluator can expose the host process, not just the workflow definition. Hardening usually means limiting who can submit scripts, disabling unnecessary language support, isolating execution, and patching the platform that embeds the runtime.