CVE-2026-41843

Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.7 Spring Framework versions 6.2.0 through 6.2.18 Spring Framework versions 6.1.0 through 6.1.27 Spring Framework versions 5.3.0 through 5.3.48

Description Spring MVC and WebFlux applications are susceptible to Path Traversal attacks during the resolution of static resources. Path Traversal is a security flaw that allows an attacker to access files and directories that are stored outside the intended folder by manipulating file paths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.