Skip to content
VMwareCVE-2026-47879

VMware Spring Cloud Gateway: server-side request forgery

High7.7CVE-2026-47879 · Published Aug 27, 2026 · updated Sep 10, 2026

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Gateway 4.3.0 - 4.3.5 Spring Cloud Gateway 4.0.0 - 4.2.9 Spring Cloud Gateway 3.1.13 and earlier

VMware advisory

Affected versions

PackageAffectedFixed in
Spring Cloud Gateway
Product
>= 5.0.0, <= 5.0.2No fix yet
>= 4.3.0, <= 4.3.5No fix yet
>= 4.0.0, <= 4.2.9No fix yet
<= 3.1.13No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-918

More VMware advisories

All VMware
Advisory
VMware Spring AMQP: resource leak
Medium6.5Aug 27
VMware Spring Integration: race condition
Medium4.2Aug 27
VMware Spring Integration: improper input validation
Medium6.3Aug 27
VMware Spring Integration: race condition
High8.2Aug 27
VMware Spring Integration: unsafe deserialization
High8.0Aug 27
VMware Spring Integration: link following
Medium6.8Aug 27

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.