Performance Impact in Spring Batch's FlatFileItemReader by Spring
CVE-2026-47881

5.9MEDIUM

Key Information:

Vendor

Spring

Status
Spring Batch
Vendor
CVE Published:
27 August 2026

What is CVE-2026-47881?

The vulnerability in Spring Batch's FlatFileItemReader allows it to process specially crafted input files that can manipulate how multi-line records are assembled. This improper handling can lead to excessive CPU time consumption and memory usage, potentially causing batch jobs to stall or result in out-of-memory scenarios. It is crucial for users of affected versions to address this issue to maintain application stability and performance during data processing tasks.

Affected Version(s)

Spring Batch 6.0.0 <= 6.0.4

Spring Batch 5.2.0 <= 5.2.6

Spring Batch 4.3.0 <= 4.3.13

References

https://spring.io/security/cve-2026-47881

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.