Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL
CVE-2026-41847

4.8MEDIUM

Key Information:

What is CVE-2026-41847?

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL.

Affected versions: Spring Framework 5.3.0 through 5.3.48.

Spring Framework 5.3.0 < 5.3.49

Score:

4.8

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

CVE-2026-41847 Data