GHSA-9F52-RJQV-25QV Spring Framework Arbitrary Method Invocation in SpEL Expressions

🗓️ 09 Jun 2026 06:31:58Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Spring SpEL evaluation allows arbitrary zero-argument method invocation even in restricted contexts.

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-expression jar	27 Jul 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41850, CVE-2026-41851, CVE-2026-41852]	27 Jul 202620:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.	22 Jul 202607:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Framework vulnerability that could allow Denial of Service (Dos) attacks, and Incorrect Authorization attacks	26 Jun 202618:29	–	ibm
Chainguard	CVE-2026-41852 vulnerabilities	31 Jul 202620:22	–	cgr
CNNVD	Spring Framework 安全漏洞	9 Jun 202600:00	–	cnnvd
CVE	CVE-2026-41852	9 Jun 202603:51	–	cve
Cvelist	CVE-2026-41852 Spring Framework Arbitrary Method Invocation in SpEL Expressions	9 Jun 202603:51	–	cvelist
Debian CVE	CVE-2026-41852	9 Jun 202603:51	–	debiancve
EUVD	EUVD-2026-35340	9 Jun 202603:51	–	euvd

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41852
github	www.github.com/spring-projects/spring-framework
github	www.github.com/spring-projects/spring-framework/releases/tag/v6.2.19
github	www.github.com/spring-projects/spring-framework/releases/tag/v7.0.8
spring	www.spring.io/security/cve-2026-41852

31 Jul 2026 21:29Current

7.1High risk

Vulners AI Score7.1

CVSS 3.13.7

EPSS0.00177

Spring Framework Spring Expression Language zero argument arbitrary invocation restricted contexts evaluation