CVE-2025-41243

CriticalCVSS 10.0/10Last modified Oct 18, 2026

Description

Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.

An application should be considered vulnerable when all the following are true:

* The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable). * Spring Boot actuator is a dependency. * The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway. * The actuator endpoints are available to attackers. * The actuator endpoints are unsecured.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-94 CWE-917

Affected software

No affected versions have been published.

Timeline

Published: Sep 16, 2025
Last modified: Oct 18, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-412447.8VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative CVE-2025-412454.9VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operat CVE-2025-412467.6VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor CVE-2025-412487.5The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameter CVE-2025-412497.5The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a paramete CVE-2025-41259.8Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitra CVE-2025-412508.5VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has perm CVE-2025-412518.1VMware NSX contains a weak password recovery mechanism vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid CVE-2025-412527.5Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this to enumerate vali CVE-2025-412537.5The following versions of Spring Cloud Gateway Server Webflux may be vulnerable to the ability to expose environment variables and system pr CVE-2025-412544.3STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages. Affected Sp CVE-2025-412558.0Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates (e.g., self-signed), unnecessarily installi