CVE-2026-59311
Received Received - Intake

Symlink Attack in Spring Integration

Publication date: 2026-08-27

Last updated on: 2026-08-27

Assigner: VMware

Description
A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symlink before the application starts. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-27
Last Modified
2026-08-27
Generated
2026-08-28
AI Q&A
2026-08-27
EPSS Evaluated
N/A
NVD
CVE-2026-59311

Affected Vendors & Products

Showing 8 associated CPEs
Vendor Product Version / Range
spring integration 7.1.0
spring integration From 7.0.0 (inc) to 7.0.5 (inc)
spring integration From 6.5.0 (inc) to 6.5.10 (inc)
spring integration From 6.4.0 (inc) to 6.4.12 (inc)
spring_project spring_integration 7.1.0
spring_project spring_integration From 7.0.0 (inc) to 7.0.5 (inc)
spring_project spring_integration From 6.5.0 (inc) to 6.5.10 (inc)
spring_project spring_integration From 6.4.0 (inc) to 6.4.12 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows a local unprivileged user to create a symlink named /tmp/ziptransformer before the application starts. When the Zip/UnZip transformer processes files, it writes output to this directory, which the attacker controls via the symlink. This can redirect extracted archive contents to any directory the attacker chooses.

Detection Guidance

Check Spring Integration versions using commands like 'find / -name spring-integration*.jar' or 'dpkg -l | grep spring-integration' to identify affected versions. Monitor for unexpected file writes in /tmp or user directories that may indicate symlink redirection.

Impact Analysis

An attacker could plant malicious files in a directory of their choice by exploiting this to overwrite existing files or create new ones under the application's user ID. This may lead to local file disclosure or unauthorized modifications, potentially compromising system integrity.

Mitigation Strategies

Upgrade Spring Integration to fixed versions: 7.1.1, 7.0.6, 6.5.11, or 6.4.13. No additional mitigation steps are required beyond upgrading to these versions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59311. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart