CVE-2026-41003

Name of the Vulnerable Software and Affected Versions Spring Security versions 5.7.0 through 5.7.23 Spring Security versions 5.8.0 through 5.8.25 Spring Security versions 6.3.0 through 6.3.16 Spring Security versions 6.4.0 through 6.4.16 Spring Security versions 6.5.0 through 6.5.10 Spring Security versions 7.0.0 through 7.0.5

Description An attacker capable of influencing values within RelyingPartyRegistration may execute arbitrary code on HTML forms generated by Spring Security filters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.