CVE Catalog
CVE-2026-59291
LowCVSS 2.0Summary
Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Affects versions 5.0.0-5.0.3, 4.3.0-4.3.4, and 4.2.0-4.2.7.
Risk Assessment
An attacker could exploit this to read arbitrary files from the server or make requests to internal resources, potentially leading to data leakage or further attacks.
Recommendation
Update Spring Cloud Function to the latest patched version.
Original NVD description (English source)
Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7