{"id":"CVE-2026-47836","title":"The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.\nSpring Cloud Config 5.0.0 - 5.0.4\nSpring Cloud …","summary":"The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.\nSpring Cloud Config 5.0.0 - 5.0.4\nSpring Cloud …","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","cwe":["CWE-367"],"vendor":"vmware","product":"spring_cloud_config","affected":["spring_cloud_config < 3.1.15","spring_cloud_config >= 4.0.0, < 4.2.9","spring_cloud_config >= 4.3.0, < 4.3.5","spring_cloud_config >= 5.0.0, < 5.0.5"],"patched":["spring_cloud_config 5.0.5"],"published":"2026-08-26","updated":"2026-09-04","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-47836","references":[{"url":"https://spring.io/security/cve-2026-47836","label":"security@vmware.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47836.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-47836"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47836"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47836"}],"tags":["nvd","csaf","vex","red-hat"],"epss":0.00142,"epssPercentile":0.03862,"ingestedAt":"2026-09-05T19:43:55.776Z","slug":"CVE-2026-47836","body":"## Overview\n\nThe base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.\nSpring Cloud Config 5.0.0 - 5.0.4\nSpring Cloud Config 4.3.0 - 4.3.4\nSpring Cloud Config 4.0.0 - 4.2.8\nSpring Cloud Config 3.1.14 and earlier\n\n## Affected\n\n- `spring_cloud_config < 3.1.15`\n- `spring_cloud_config >= 4.0.0, < 4.2.9`\n- `spring_cloud_config >= 4.3.0, < 4.3.5`\n- `spring_cloud_config >= 5.0.0, < 5.0.5`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `spring_cloud_config 5.0.5`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47836.json)","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}