Vulnerability details

CVE-2026-47836

Spring Cloud Config

Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

CVSS 3.1

7.2High

Official description

The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier

CVSS scores

Score	Version	Source	Vector
7.2High	3.1	CVEProject cvelistV5 (CNA) (vmware)	`CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N`

Affected products

Vendor	Product	Versions	Source
Spring	Spring Cloud Config	v ≤ 3.1.14	CVEProject cvelistV5 (CNA)
Spring	Spring Cloud Config	4.0.0 ≤ v ≤ 4.2.8	CVEProject cvelistV5 (CNA)
Spring	Spring Cloud Config	4.3.0 ≤ v ≤ 4.3.4	CVEProject cvelistV5 (CNA)
Spring	Spring Cloud Config	5.0.0 ≤ v ≤ 5.0.4	CVEProject cvelistV5 (CNA)

References and advisories

https://spring.io/security/cve-2026-47836

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-08-26
Last updated: 2026-08-27
State: Published
Assigner (CNA): vmware

Exploit prediction (EPSS)

0.21%

Probability of exploitation in 30 days

12.1%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total