I just replied to another post for the same issue. A workaround is to
install java8 and use this to run vassal. However, it would be nice if
the maintainer(s) posts an update on this issue (illegal reflective
access).
There’s a test build for Java 9 and later linked from this thread: