CVE-2026-47879

Spring Cloud Gateway SSRF and native file access with gRPC

7.7 High

CVE-2026-47879 is a high vulnerability (CVSS 7.7) in Spring Cloud Gateway, published August 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Gateway 4.3.0 - 4.3.5 Spring Cloud Gateway 4.0.0 - 4.2.9 Spring Cloud Gateway 3.1.13 and earlier

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: None

Exploit likelihood

0.33%Up 0.1 points since Aug 27, 2026

What each source reports

CVE List Score used 7.7

Spring Cloud Gateway SSRF and native file access with gRPC

Record: CVE-2026-47879
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Weakness: CWE-918
Updated: 2026-11-02

EUVDEUVD-2026-66842 7.7

Record: EUVD-2026-66842
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-7mwm-q6x4-5h32 7.7

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations...

Record: GHSA-7mwm-q6x4-5h32
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Weakness: CWE-918
Updated: 2026-11-02

NVD 7.7

Record: CVE-2026-47879
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1: 8.7 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Weakness: CWE-918
Updated: 2026-11-02

OSV 7.7