CVE-2026-59279
Received Received - Intake

MCP Streamable HTTP Server Memory Exhaustion Vulnerability

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: VMware

Description
The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over time, gradually exhausting available memory and ultimately causing a Denial of Service that affects all legitimate clients. Affected versions: Spring AI: 2.0.0

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-21
Last Modified
2026-08-21
Generated
2026-08-21
AI Q&A
2026-08-21
EPSS Evaluated
N/A
NVD
CVE-2026-59279
EUVD
EUVD-2026-63931

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
vmware spring_ai 2.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves the MCP Streamable HTTP server transport in Spring AI versions 2.0.0. The server does not limit the number of sessions it keeps and does not require clients to authenticate. Attackers can exploit this by creating many sessions, consuming memory until the server crashes, causing a Denial of Service for all users.

Detection Guidance

Monitor for unusually high session counts or memory usage on the Spring AI server. Check logs for excessive session creation attempts. Use system monitoring tools like 'top', 'htop', or 'jstack' to observe memory consumption and thread counts.

Impact Analysis

If you use Spring AI 2.0.0, an attacker could overload your server with fake sessions, leading to crashes and downtime. This disrupts service for all users, including legitimate ones, and may require system restarts to recover.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling Denial of Service attacks that disrupt service availability for all users, potentially violating requirements for data access, processing, or security in regulated environments.

Mitigation Strategies

Upgrade to Spring AI version 2.0.1 (OSS) or 2.0.0.1 (Enterprise Support) immediately. No additional mitigation steps are required after upgrading. Ensure all instances are updated to prevent session exhaustion attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59279. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart