Romania

Unlikely: Romania has a roughly 25–30% chance of direct involvement in significant armed conflict within the next three years, with risk concentrated in accidental spillover or Black Sea escalation rather than deliberate attack.

Most likely: continued RO-ALERT-style warnings, periodic fighter scrambles, and incremental air-defense reinforcement near the Danube/Black Sea approaches, with incidents managed below Article 5 thresholds. Key escalators: a mass-casualty debris/strike event on Romanian soil, a shootdown/intercept that produces rapid retaliation dynamics, or a serious Black Sea shipping/energy-infrastructure incident.

Risk direction depends on the Ukraine end-state and Black Sea security regime. A durable ceasefire and reduced strike tempo near the Danube would lower kinetic spillover risk, though hybrid and cyber pressure persists. If Black Sea infrastructure becomes a sustained target set, Moldova destabilizes sharply, or allied cohesion/posture weakens materially, Romania’s exposure rises due to geography, basing, and critical coastal/offshore assets.

Security situation Romania is a NATO/EU frontline state bordering Ukraine and exposed to the Black Sea. The dominant pathway to war involvement is inadvertent escalation from spillover or a fast-moving air/maritime incident, not Romanian intent.

Threat drivers The most credible kinetic trigger remains cross-border drone/missile spillover from Russian strikes in southern Ukraine. Reporting of multiple airspace incursions and at least one undetected drone impact far from the border indicates a non-zero chance of casualties or a shootdown/engagement decision under uncertainty. A second driver is Black Sea insecurity: mines, navigation incidents, and coercive signaling against shipping, ports, and offshore/energy infrastructure could generate a limited exchange or crisis that compresses NATO decision time. A third driver is hybrid pressure around Moldova and within Romania (disinformation, counterintelligence cases, sabotage plotting allegations), which is more likely to stay below open warfare but can raise misperception and crisis instability.

Resilience and systemic firebreaks NATO’s forward presence, integrated air and missile defense architecture, and the Article 5 tripwire make deliberate Russian kinetic action against Romania structurally unattractive. Romania is also investing in resilience and defense industrial capacity, and official strategy documents emphasize preparedness for a prolonged nearby war rather than offensive postures. Recent cyber incidents against utilities highlight vulnerabilities in critical infrastructure governance, but also show continuity of state response (restoration, manual fallback, and integration into national cyber-defense mechanisms) rather than collapse.

Domestic stability Protest activity and polarization have increased, driven by austerity and institutional distrust, but remain far below civil-war dynamics. The main security relevance is susceptibility to disinformation and governance distraction, not imminent internal armed conflict.

Net assessment New evidence modestly increases salience of the spillover/cyber-vulnerability channels but does not indicate a structural shift toward likely war. Overall three-year risk is assessed at 0.28: unlikely, with concentrated tail risk in a small set of incident-driven escalation scenarios.