CVE-2026-59283
UnknownSummary
Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. Affects multiple versions of Spring Framework.
Risk Assessment
The safety guard bypass could allow an attacker to perform unauthorized operations or access sensitive data, potentially leading to application security compromise.
Recommendation
Update Spring Framework to the latest patched version or disable the SpEL expression compiler if not required.
Original NVD description (English source)
Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.25.RELEASE and earlier