Skip to content
OpenAdvisories

Product · Spring

Spring Cloud Config

10 known vulnerabilities.

Spring Cloud Config at a glance

Last 12 months
8
Critical · all time
1
Exploited · all time
0
Public exploit · all time
2
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 4 vulnerabilities, 1 critical June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 4 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202640
Jul 202600
Jun 202600
May 202641
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202510
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Medium 5.3
    CVE-2026-59315

    Spring Cloud Config Monitor Denial of Service

    The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier

    Spring Spring Cloud Config
  • Medium 4.9
    CVE-2026-47894

    Spring Cloud Config Server Native Environment Repository Exposure

    Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Confi…

    Spring Spring Cloud Config
  • Medium 6.8
    CVE-2026-47837

    Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests

    Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpoint are not validated. This issue affects Spring Cloud Config: from 5.0.0 through 5.0.4, from 4.3.0 …

    Spring Spring Cloud Config
  • High 7.2
    CVE-2026-47836

    Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

    The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 S…

    Spring Spring Cloud Config
  • High 7.5
    CVE-2026-40981

    Spring Cloud Config has an Authorization Bypass Through User-Controlled Key

    When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP projects. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclu…

    Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven
  • High 7.4
    CVE-2026-41002

    Spring Cloud Config Server Susceptible To TOCTOU Attack

    The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (incl…

    Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven
  • Medium 4.4
    CVE-2026-41004

    Spring Cloud Config Server Logged Sensitive Information

    When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Clo…

    Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven
  • Critical 9.1
    CVE-2026-40982 Public exploit

    Spring Cloud Config vulnerable to Path Traversal

    Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack. Spri…

    Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven
  • Medium 5.3
    CVE-2025-22232

    Spring Cloud Config Server May Not Use Vault Token Sent By Clients

    Spring Cloud Config Server may not use Vault token sent by clients using a X-CONFIG-TOKEN header when making requests to Vault. Your application may be affected by this if the following are true: * You have Spring Vault on the classpath of your Spring Cloud C…

    Spring Spring Cloud Config
  • Medium 6.5
    CVE-2019-3799 Public exploit EPSS 85%

    Directory Traversal with spring-cloud-config-server

    Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A mal…

    Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven