CVE-2026-47879: Spring Cloud Gateway SSRF and native file access with gRPC
Published Aug 27, 2026
·Updated
Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Gateway 4.3.0 - 4.3.5 Spring Cloud Gateway 4.0.0 - 4.2.9 Spring Cloud Gateway 3.1.13 and earlier
Affected Software
1 affected component
Spring Spring Cloud Gateway>=5.0.0<=5.0.2, >=4.3.0<=4.3.5, >=4.0.0<=4.2.9, >3.1.13<=
Event History
Aug 27, 2026
CVE Published
via MITRE·05:20 AM
Data Sourced
via MITRE·05:20 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 AM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that high privileges are required. Exploitation is network-accessible, does not require user interaction, and has high attack complexity.
2
Which Spring Cloud Gateway versions are affected?
Affected versions are 5.0.0 through 5.0.2, 4.3.0 through 4.3.5, 4.0.0 through 4.2.9, and 3.1.13 and earlier.
3
What security impact can successful exploitation have?
Successful exploitation can expose confidential information and allow integrity-impacting actions through SSRF and native file access. The provided CVSS vector indicates no availability impact.