CVE-2026-47888: Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler
A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.0.RELEASE - 5.2.25.RELEASE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Spring Framework (RSocketMessageHandler memory leak via malformed SETUP frame)to a version that resolves this vulnerability.Fixed in 5.2.25.RELEASE - Upgrade
Upgrade
Spring Framework (RSocketMessageHandler memory leak via malformed SETUP frame)to a version that resolves this vulnerability.Fixed in 5.3.49 - Upgrade
Upgrade
Spring Framework (RSocketMessageHandler memory leak via malformed SETUP frame)to a version that resolves this vulnerability.Fixed in 6.0.30 - Upgrade
Upgrade
Spring Framework (RSocketMessageHandler memory leak via malformed SETUP frame)to a version that resolves this vulnerability.Fixed in 6.1.28 - Upgrade
Upgrade
Spring Framework (RSocketMessageHandler memory leak via malformed SETUP frame)to a version that resolves this vulnerability.Fixed in 6.2.19 - Upgrade
Upgrade
Spring Framework (RSocketMessageHandler memory leak via malformed SETUP frame)to a version that resolves this vulnerability.Fixed in 7.0.8
Event History
Frequently Asked Questions
Which deployments should be prioritized for review?
Spring RSocket applications using Spring Framework 7.0.0 through 7.0.8, 6.2.0 through 6.2.19, 6.1.0 through 6.1.28, 6.0.0 through 6.0.30, 5.3.0 through 5.3.49, or 5.2.0.RELEASE through 5.2.25.RELEASE should be reviewed.
What input is involved in triggering the issue?
The issue is associated with a malformed RSocket SETUP frame handled by RSocketMessageHandler. Affected applications are exposed to a memory leak through that frame.