High WID-SEC-2026-1399 4 CVEs

VMware Tanzu Spring Cloud Config: Mehrere Schwachstellen

Published May 6, 2026 · Updated May 6, 2026 · de-DE

Vendor: VMware Tanzu Product: Spring Cloud Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Cloud Config ausnutzen, um vertrauliche Informationen offenzulegen oder Daten zu manipulieren.

Product

VMware Tanzu Spring Cloud ist eine Plattform zur Bereitstellung und Verwaltung von Spring-Anwendungen in Cloud-Umgebungen unter Verwendung von Microservices-Architekturen.

Vulnerabilities 4

Critical 9.1

CVE-2026-40982 Public exploit

Spring Cloud Config vulnerable to Path Traversal

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack. Spri…

Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven

May 7, 2026
High 7.5

CVE-2026-40981

Spring Cloud Config has an Authorization Bypass Through User-Controlled Key

When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP projects. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclu…

Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven

May 7, 2026
High 7.4

CVE-2026-41002

Spring Cloud Config Server Susceptible To TOCTOU Attack

The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (incl…

Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven

May 7, 2026
Medium 4.4

CVE-2026-41004

Spring Cloud Config Server Logged Sensitive Information

When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Clo…

Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven

May 7, 2026

Revision history

2026-05-06 #1
Initiale Fassung

References

Spring Security Advisories vom 2026-05-06
https://spring.io/security/cve-2026-41004
Spring Security Advisories vom 2026-05-06
https://spring.io/security/cve-2026-41002
Spring Security Advisories vom 2026-05-06
https://spring.io/security/cve-2026-40982
Spring Security Advisories vom 2026-05-06
https://spring.io/security/cve-2026-40981