CVE-2026-41707

Name of the Vulnerable Software and Affected Versions Spring Security version 7.1.0 Spring Security versions 7.0.0 through 7.0.6 Spring Security versions 6.5.0 through 6.5.11

Description An authentication bypass issue exists in the DPoPProofJwtDecoderFactory due to a cache-based replay attack. The internal cache used for storing JWT ID claims has a strict size limit. An attacker can flood the server with dummy requests to evict legitimate entries from the cache, enabling the replay of intercepted valid DPoP proofs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.