CVE-2026-40973

[CVE catalog]

Severity

High · CVSS 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Published

Apr 23, 2026, 10:00:00 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.14% · Oct 25, 2026

A flaw was found in Spring Boot. A local attacker on the same host as the application may be able to take control of the `ApplicationTemp` directory due to predictable temporary directory handling. When the `server.servlet.session.persistent` setting is enabled and the attack persists across application restarts, this could allow the attacker to read session information, hijack authenticated user sessions, or execute arbitrary code as the application's user. Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.