CVE-2026-47836

Analyzed Analyzed - Analysis Complete

Time-of-Check Time-of-Use Flaw in Spring Cloud Config Server

Publication date: 2026-08-26

Last updated on: 2026-09-04

Assigner: VMware

Description

The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-09-04

Generated

2026-09-16

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-15

NVD

CVE-2026-47836

EUVD

EUVD-2026-66637

Affected Vendors & Products

Vendor	Product	Version / Range
vmware	spring_cloud_config	From 5.0.0 (inc) to 5.0.5 (exc)
vmware	spring_cloud_config	to 3.1.15 (exc)
vmware	spring_cloud_config	From 4.0.0 (inc) to 4.2.9 (exc)
vmware	spring_cloud_config	From 4.3.0 (inc) to 4.3.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-367	The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

Executive Summary

This vulnerability is a time-of-check-time-of-use (TOCTOU) attack affecting the Spring Cloud Config Server. It occurs in the base directory used to clone SVN repositories, where an attacker could manipulate the directory between the time it is checked and the time it is used.

Detection Guidance

The provided context does not include specific detection methods or commands for identifying this vulnerability on a network or system. Detection primarily involves checking the version of Spring Cloud Config Server in use.

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive data or alter configurations by replacing files in the cloned repository directory before the server uses them.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, potentially violating GDPR (data protection) or HIPAA (health data privacy) by exposing or altering sensitive information.

Mitigation Strategies

Upgrade to fixed versions: Spring Cloud Config 5.0.5 (OSS) or 4.3.5, 4.2.9, or 3.1.15 (Enterprise Support). No additional mitigation steps are required beyond upgrading.

Hi! I’m here to help you understand CVE-2026-47836. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70