CVE-2026-47862

MediumCVSS 5.4/10Last modified Sep 2, 2026

Description

An attacker who can set the file_name header on a message reaching a ZipTransformer with ZipResultType.FILE (the default) can cause the resulting .zip archive to be written to an arbitrary filesystem path outside the configured workDirectory. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
Spring	Spring Integration	7.1.0; >= 7.0.0, <= 7.0.5; >= 6.5.0, <= 6.5.10; >= 6.4.0, <= 6.4.12

References

https://spring.io/security/cve-2026-47862Vendor Advisory

Timeline

Published: Aug 27, 2026
Last modified: Sep 2, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-478637.5In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (CVE-2026-478649.8SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.ObjectInputStream and no class filtering.CVE-2026-478659.8VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi CVE-2026-478668.3VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the CVE-2026-478678.8VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi CVE-2026-478687.8VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to escalate the CVE-2026-478698.8VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network access may be able to i CVE-2026-478708.8VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able to ex CVE-2026-478718.8VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network CVE-2026-478738.0The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) ra CVE-2026-478745.3The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to CVE-2026-478759.8Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if