Insecure Temporary File

🗓️ 14 Aug 2026 15:04:10Reported by Veracode Vulnerability DatabaseType

Spring Boot uses a predictable static directory for Artemis broker data, enabling symlink attacks by local users.

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	6 Aug 202607:35	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 Aug 202619:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Boot [CVE-2026-40992, CVE-2026-41001]	27 Jul 202620:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:33	–	ibm
Chainguard	CVE-2026-41001 vulnerabilities	22 Aug 202620:26	–	cgr
Circl	CVE-2026-41001	11 Jun 202606:47	–	circl
CNNVD	VMware Spring Boot 安全漏洞	11 Jun 202600:00	–	cnnvd
CVE	CVE-2026-41001	11 Jun 202605:04	–	cve
Cvelist	CVE-2026-41001 Predictable Temp Directory in Artemis Auto-configuration	11 Jun 202605:04	–	cvelist
EUVD	EUVD-2026-36211	11 Jun 202605:04	–	euvd

Vulners

Node

Source	Link
github	www.github.com/spring-projects/spring-boot/commit/4218bd76e934e5cf9e3fd3997c67b8a6b0d0c111
spring	www.spring.io/security/cve-2026-41001
github	www.github.com/advisories/GHSA-ggg2-9786-hwc8

14 Aug 2026 15:21Current

5Medium risk

Vulners AI Score5

CVSS 3.15.3

EPSS0.00094

SSVC