CVE-2026-59311

Analyzed Analyzed - Analysis Complete

Symlink Attack in Spring Integration

Publication date: 2026-08-27

Last updated on: 2026-08-31

Assigner: VMware

Description

A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symlink before the application starts. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-27

Last Modified

2026-08-31

Generated

2026-09-17

AI Q&A

2026-08-27

EPSS Evaluated

2026-09-15

NVD

CVE-2026-59311

Affected Vendors & Products

Vendor	Product	Version / Range
vmware	spring_integration	From 6.4.0 (inc) to 6.4.12 (inc)
vmware	spring_integration	From 6.5.0 (inc) to 6.5.10 (inc)
vmware	spring_integration	7.1.0
vmware	spring_integration	7.1.0
vmware	spring_integration	7.1.0
vmware	spring_integration	7.1.0
vmware	spring_integration	7.1.0
vmware	spring_integration	From 7.0.0 (inc) to 7.0.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

This vulnerability allows a local unprivileged user to create a symlink named /tmp/ziptransformer before the application starts. When the Zip/UnZip transformer processes files, it writes output to this directory, which the attacker controls via the symlink. This can redirect extracted archive contents to any directory the attacker chooses.

Detection Guidance

Check Spring Integration versions using commands like 'find / -name spring-integration*.jar' or 'dpkg -l | grep spring-integration' to identify affected versions. Monitor for unexpected file writes in /tmp or user directories that may indicate symlink redirection.

Impact Analysis

An attacker could plant malicious files in a directory of their choice by exploiting this to overwrite existing files or create new ones under the application's user ID. This may lead to local file disclosure or unauthorized modifications, potentially compromising system integrity.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized local file access or modification. A local attacker could redirect Zip/UnZip output to manipulate files, which may lead to data integrity issues or unauthorized access to sensitive data. This could violate GDPR's integrity and confidentiality principles or HIPAA's safeguards for protected health information.

Mitigation Strategies

Upgrade Spring Integration to fixed versions: 7.1.1, 7.0.6, 6.5.11, or 6.4.13. No additional mitigation steps are required beyond upgrading to these versions.

Hi! I’m here to help you understand CVE-2026-59311. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70