The vulnerability identified as CVE-2026-47873 (CWE-1327) affects Spring Tools for Eclipse versions 5.2.0 and earlier. The Boot Dashboard Docker integration component binds container control ports to all network interfaces (0.0.0.0) rather than limiting binding to the loopback interface (127.0.0.1). This unrestricted binding potentially allows remote network access to these control ports, increasing the risk of unauthorized access or control. The CVSS v3.1 score is 8.0, indicating high severity with high impact on confidentiality, integrity, and availability. No official remediation or patch is currently documented, and no known exploits are reported in the wild.

The vulnerability allows container control ports to be accessible on all network interfaces, which may lead to unauthorized remote access to Docker container controls via Spring Tools for Eclipse. This can compromise confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the significant risk posed by this exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the affected ports through external means such as firewall rules or network segmentation to limit exposure. Monitor vendor channels for updates or patches addressing this issue.