CVE-2026-41853

A flaw was found in Spring MVC and WebFlux applications, components of the Spring Framework. This vulnerability allows a remote, unauthenticated attacker to perform Multipart request smuggling attacks. Such an attack can lead to a low integrity impact, potentially enabling the attacker to bypass security controls or modify data.

This Moderate-impact flaw in Spring MVC and WebFlux applications allows remote, unauthenticated attackers to conduct Multipart request smuggling. This can lead to bypassing security controls or modifying data, affecting the integrity of applications utilizing these Spring Framework components.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Users of affected versions should upgrade to the corresponding fixed version.