CVE-2026-47879: CWE-918 Server-Side Request Forgery (SSRF) in Spring Spring Cloud Gateway

The vulnerability CVE-2026-47879 exists in Spring Cloud Gateway's JsonToGrpcGatewayFilterFactory component, which improperly allows arbitrary Spring Resource locations to be specified for proto descriptor definitions. This SSRF vulnerability affects Spring Cloud Gateway versions 3.1.13 and earlier, 4.0.0 through 4.2.9, 4.3.0 through 4.3.5, and 5.0.0 through 5.0.2. The CVSS v3.1 score is 7.7, indicating high severity, with attack vector network, high attack complexity, requiring high privileges, no user interaction, and impacts confidentiality and integrity with no availability impact. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker with high privileges to perform SSRF attacks by specifying arbitrary Spring Resource locations, potentially leading to full compromise of confidentiality and integrity of the affected system. Availability is not impacted. This could enable unauthorized access to internal resources or sensitive data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable component to trusted users with high privileges and monitor for suspicious activity related to resource loading. Avoid exposing the JsonToGrpcGatewayFilterFactory configuration to untrusted inputs.