How severe is CVE-2026-59279?

CVE-2026-59279 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2026-59279 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (44th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-59279?

CVE-2026-59279 affects Vmware Spring Ai. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-59279?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2026-59279 published?

CVE-2026-59279 was published on 2026-08-21 and last updated on 2026-09-16.

CVE-2026-59279

CVE-2026-59279 is a high-severity vulnerability in Vmware Spring Ai with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-770.

Key facts

Severity: High (CVSS 3.x base score 7.5)
EPSS exploit prediction: 1% (44th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-770
Affected product: Vmware Spring Ai
Published: 2026-08-21
Last modified: 2026-09-16

Description

The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over time, gradually exhausting available memory and ultimately causing a Denial of Service that affects all legitimate clients. Affected versions: Spring AI: 2.0.0

Frequently asked questions

What is CVE-2026-59279?: The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over time, gradually exhausting available memory and ultimately causing a Denial of Service that affects all legitimate clients. Affected versions: Spring AI: 2.0.0
How severe is CVE-2026-59279?: CVE-2026-59279 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2026-59279 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (44th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-59279?: CVE-2026-59279 affects Vmware Spring Ai. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-59279?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2026-59279 published?: CVE-2026-59279 was published on 2026-08-21 and last updated on 2026-09-16.

References

https://spring.io/security/cve-2026-59279

Affected products (1)

cpe:2.3:a:vmware:spring_ai:*:-:*:*:*:*:*:*

More vulnerabilities in Vmware Spring Ai

CVE-2026-22738 — Critical (CVSS 9.8): In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a…
CVE-2026-40978 — High (CVSS 8.8): SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via…
CVE-2026-22730 — High (CVSS 8.8): A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass…
CVE-2026-47835 — High (CVSS 8.6): In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in…
CVE-2026-41705 — High (CVSS 8.6): Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via…
CVE-2026-40967 — High (CVSS 8.6): In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to…

All CVEs affecting Vmware Spring Ai →

Other CWE-770 (Allocation of Resources Without Limits or Throttling) vulnerabilities

CVE-2026-63299 — Critical (CVSS 9.9): An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume…
CVE-2026-82439 — Critical (CVSS 9.8): Description The DRPC server kept a map from function name to request queue and created an entry the first time…
CVE-2026-47891 — Critical (CVSS 9.8): A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the…
CVE-2026-74878 — Critical (CVSS 9.8): openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared…
CVE-2026-31283 — Critical (CVSS 9.8): In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email…
CVE-2020-37067 — Critical (CVSS 9.8): Filetto 1.0 FTP server contains a denial of service vulnerability in the FEAT command processing that allows attackers…

Browse all CWE-770 (Allocation of Resources Without Limits or Throttling) vulnerabilities →