PT-2026-49468 · Spring · Spring Cloud Gateway

Published 2026-06-15 · Updated 2026-06-15 · CVE-2026-47825

NVD

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux Gateway Servers.

Affected versions: Spring Cloud Gateway 3.1.x (fix 3.1.13). Spring Cloud Gateway 4.1.x (fix 4.1.13). Spring Cloud Gateway 4.2.x (fix 4.2.9). Spring Cloud Gateway 4.3.x (fix 4.3.5). Spring Cloud Gateway 5.0.x (fix 5.0.2).

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2026-47825

Affected Products

Spring Cloud Gateway

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-47825 · Security Note
• https://spring.io/security/cve-2026-47825 · Note