Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL

보통 5.3CVE-2026-41847 · GHSA-vqgp-pf68-6947 · Published 09/06/2026 · updated 23/07/2026

요약

CVE-2026-41847은(는) org.springframework:spring-webflux, spring framework (vmware)에 영향을 주는 보통 (CVSS 5.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.17%, 전체 취약점의 5.9%보다 높음.
조치: 5.3.49 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
org.springframework:spring-webflux Maven	`≤ 5.3.39`	No fix yet
spring framework vmware	`≥ 5.3.0, < 5.3.49`	`5.3.49`

Description

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL.

Affected versions: Spring Framework 5.3.0 through 5.3.48.

NVD description

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48.

References

nvd.nist.gov/vuln/detail/CVE-2026-41847 · ADVISORY
spring-projects/spring-framework · PACKAGE
spring.io/security/cve-2026-41847 · WEB

org.springframework:spring-webflux의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.springframework:spring-webflux

Maven

≤ 5.3.39

No fix yet

spring framework

vmware

≥ 5.3.0, < 5.3.49

5.3.49

Description

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL.

Affected versions: Spring Framework 5.3.0 through 5.3.48.

NVD description

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48.

org.springframework:spring-webflux의 다른 취약점

모두 보기 →