CVE-2026-41843

A flaw was found in Spring Framework. Specifically, Spring MVC and WebFlux applications are vulnerable to a Path Traversal attack. This vulnerability allows a remote attacker to access sensitive files or directories on the server by manipulating requests for static resources. The successful exploitation of this flaw could lead to unauthorized information disclosure.

This Moderate impact flaw in Spring Framework's MVC and WebFlux components allows a remote attacker to perform path traversal. Successful exploitation, while requiring high attack complexity, could lead to unauthorized information disclosure by accessing sensitive files or directories when applications resolve static resources.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.