A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. (CVE-2026-82594)

CVE-2026-82594 affects LogNet grpc-spring-boot-starter versions up to 5.2.0. The vulnerability stems from improper authorization caused by a flaw in the annotation processing component. This issue allows an attacker with low privileges to perform unauthorized actions remotely. The attack complexity is high, and no user interaction is required. Although the exploit has been publicly disclosed, the project has not yet responded with a fix or mitigation. The CVSS v3.1 base score is 5.0, indicating a low severity impact primarily affecting confidentiality, integrity, and availability at a low level.

The vulnerability leads to improper authorization, potentially allowing unauthorized access or actions within the affected component. The impact on confidentiality, integrity, and availability is low. Exploitation requires remote access with low privileges and high complexity, limiting the likelihood of successful attacks. No known exploits are currently observed in the wild.

No official patch or fix is currently available for this vulnerability. The project has not responded to the issue report. Users should monitor the vendor or project advisory channels for updates. Until a fix is released, consider restricting access to affected services and applying compensating controls to limit exposure.