CVE-2026-59299

LowCVSS 3.1

Published: 27/08/2026(UTC)Translated: 28/08/2026(UTC)NVD NIST

Summary

In Spring Cloud Function, composition lookup can potentially poison the base function, which may lead to unauthorized code execution or manipulation of function behavior.

Risk Assessment

Poisoning the base function could allow an attacker to execute malicious code or alter application logic, potentially leading to security breaches.

Recommendation

Update Spring Cloud Function to a patched version or restrict access to the composition mechanism.

Original NVD description (English source)

Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier