PT-2026-34251 · Vmware · Spring Security

Published 2026-04-22 · Updated 2026-04-23 · CVE-2026-22747

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Spring Spring Security versions 7.0.0 through 7.0.4

Description The SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values. This flaw can lead to the system reading the incorrect username, allowing an attacker using a carefully crafted certificate to impersonate another user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-297

Related Identifiers

CVE-2026-22747

GHSA-2JRG-RF5X-568G

Affected Products

Spring Security

References · 7

• https://spring.io/security/cve-2026-22747 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22747 · Security Note
• https://osv.dev/vulnerability/GHSA-2jrg-rf5x-568g · Vendor Advisory
• https://github.com/spring-projects/spring-security · Note
• https://github.com/spring-projects/spring-security/commit/88118afb8f9357ae7cc215500a441e89fee701c3 · Note
• https://twitter.com/infoflowcloud/status/2047430012328976631 · Twitter Post
• https://twitter.com/CVEnew/status/2047428160183263533 · Twitter Post