The vulnerability identified as CVE-2026-47873 affects Spring Tools for Eclipse versions 5.2.0 and earlier. The Boot Dashboard Docker integration component binds container control ports to all host network interfaces (0.0.0.0), rather than limiting access to the loopback interface (127.0.0.1). This unrestricted binding (CWE-1327) potentially exposes sensitive control ports to unauthorized network access, increasing the risk of remote compromise. The CVSS v3.1 score is 8.0, indicating high severity with high impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been published by the vendor as of the provided data.

Because the container control ports are exposed on all network interfaces, an attacker with network access could potentially interact with these ports, leading to unauthorized control or disruption of containerized environments managed via Spring Tools for Eclipse. The CVSS score reflects high impact on confidentiality, integrity, and availability, meaning exploitation could result in significant compromise of the affected system.

No official fix or patch has been confirmed as available. Users should monitor the vendor's advisory channels for updates. Until a fix is provided, restricting network access to the affected host or using firewall rules to limit exposure of the Docker control ports to trusted interfaces may reduce risk. Avoid exposing the development environment to untrusted networks.