CVE-2026-47894
published 2026-08-27CVE-2026-47894: Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config…
PriorityP344high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.49%
41.6th percentile
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| spring | spring_cloud_config | <= 3.1.14 | — |
| spring | spring_cloud_config | 4.0.0 – 4.2.8 | — |
| spring | spring_cloud_config | 4.3.0 – 4.3.4 | — |
| spring | spring_cloud_config | 5.0.0 – 5.0.4 | — |
| vmware | spring_cloud_config | < 3.1.15 | 3.1.15 |
| vmware | spring_cloud_config | >= 4.0.0 < 4.2.9 | 4.2.9 |
| vmware | spring_cloud_config | >= 4.3.0 < 4.3.5 | 4.3.5 |
| vmware | spring_cloud_config | >= 5.0.0 < 5.0.5 | 5.0.5 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.
ghsa_unreviewed·2026-08-27
CVE-2026-47894 [MEDIUM] Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
Red Hat
org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: Configuration file exposure via native environment repository
vendor_redhat·2026-08-27·CVSS 7.5
CVE-2026-47894 [HIGH] CWE-22 org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: Configuration file exposure via native environment repository
org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: Configuration file exposure via native environment repository
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
A flaw was found in Spring Cloud Config Server. This vulnerability allows for the exposure of configuration files outside of their intended repository path. An attacker with high privileges could exploit this flaw through the native environment repository, leading to sensitive information disclosure.
Statement: Moderate: This flaw in Spring Cloud Config Server's native e
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-47894 log4j: Spring Cloud Config Server: Configuration file exposure via native environment repository [fedora-all]
bugzilla·2026-09-21·CVSS 7.5
CVE-2026-47894 [HIGH] CVE-2026-47894 log4j: Spring Cloud Config Server: Configuration file exposure via native environment repository [fedora-all]
CVE-2026-47894 log4j: Spring Cloud Config Server: Configuration file exposure via native environment repository [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
Bugzilla
CVE-2026-47894 org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: Configuration file exposure via native environment repository
bugzilla·2026-08-27·CVSS 7.5
CVE-2026-47894 [HIGH] CVE-2026-47894 org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: Configuration file exposure via native environment repository
CVE-2026-47894 org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: Configuration file exposure via native environment repository
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
2026-08-27
Published