CVE-2026-59279: Allocation of Resources Without Limits or Throttling in Spring Spring AI
CVE-2026-59279 is a vulnerability in Spring AI version 2.0.0 where the MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not limit the number of sessions it retains and does not require client authentication by default. This allows a remote attacker to cause the server to accumulate an unbounded number of sessions, leading to memory exhaustion and a denial of service affecting all legitimate clients.
AI Analysis
Technical Summary
The MCP Streamable HTTP server transport in Spring AI 2.0.0 lacks limits on session retention and does not enforce client authentication by default. This design flaw enables a remote attacker to create an unlimited number of sessions, causing gradual memory exhaustion and ultimately resulting in a denial of service condition that disrupts service availability for legitimate users. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity, with no confidentiality or integrity impact but a significant impact on availability.
Potential Impact
The vulnerability allows remote attackers to cause a denial of service by exhausting server memory through unbounded session accumulation. This affects the availability of the Spring AI service for all legitimate clients. There is no impact on confidentiality or integrity.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing custom session limits or requiring client authentication to mitigate unbounded session accumulation.
CVE-2026-59279: Allocation of Resources Without Limits or Throttling in Spring Spring AI
Description
CVE-2026-59279 is a vulnerability in Spring AI version 2.0.0 where the MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not limit the number of sessions it retains and does not require client authentication by default. This allows a remote attacker to cause the server to accumulate an unbounded number of sessions, leading to memory exhaustion and a denial of service affecting all legitimate clients.
CVSS v3.1
Score 7.5high
Affected software
pkg:maven/org.springframework/spring-aiRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The MCP Streamable HTTP server transport in Spring AI 2.0.0 lacks limits on session retention and does not enforce client authentication by default. This design flaw enables a remote attacker to create an unlimited number of sessions, causing gradual memory exhaustion and ultimately resulting in a denial of service condition that disrupts service availability for legitimate users. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity, with no confidentiality or integrity impact but a significant impact on availability.
Potential Impact
The vulnerability allows remote attackers to cause a denial of service by exhausting server memory through unbounded session accumulation. This affects the availability of the Spring AI service for all legitimate clients. There is no impact on confidentiality or integrity.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing custom session limits or requiring client authentication to mitigate unbounded session accumulation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- vmware
- Date Reserved
- 2026-07-04T18:13:26.297Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a884318acd9273b491e8756
Added to database: 08/21/2026, 12:22:48 UTC
Last enriched: 08/21/2026, 12:37:05 UTC
Last updated: 08/21/2026, 12:37:05 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.